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Earthquake Law 
Pushes Hospitals 


To Spend Big on IT 


California measure leads to new data centers, 
IT upgrades; costs expected to be in the billions 





BY BOB BREWIN AND 
PATRICK THIBODEAU 
A California law that mandates | 
earthquake-proof hospitals is 
sparking massive investments 
in IT infrastructure upgrades 
by health care companies in 
the state, starting with the 
hardening of datacenters but | 
also including the deployment | 
of faster networks, wire- 
less systems and other 
new technologies. 

For example, Sacra- 
mento-based Sutter 
Health expects to spend 
the better part of $1 bil- 
lion on technology up- 
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| grades at its 26 hospitals over 


the next 10 years as a result of 
the law, CIO John Hummel 


| said last week. As the not-for- 
profit company rebuilds some 


of its facilities to comply with 
the law, it plans to invest in 


| new bandwidth and storage 


capabilities in an effort to 
meet processing demands well 
into the future, he said. 
Mark Zielanzinski, 
CIO at El Camino Hos- 
pital in Mountain View, 
said his facility is build- 
ing a data center and de- 
molishing its existing 
Hospital IT, page 16 


ERP Users Bristle at Upgrade 
Pressure, Maintenance Costs 


IT execs cite growing 
dissatisfaction, take 
steps to rein in vendors 


Many IT managers are becom- 
ing increasingly agitated by 
the ballooning costs of main- 


| 
BY MARC L. SONGINI | 
taining packaged business ap- | 


plications and the relentless 
efforts of software vendors to 
push them to upgrade their 
systems. 

Five users of ERP software 
and other business applica- 
tions said last week that they 
are being hit by increases in 
maintenance fees or feeling 
pressure from vendors to in- 
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KNOWLEDGE CENTER PROJECT MANAGEMENT 


SPECIAL 


The best IT project 
managers learn how 


REPORT to cope with business 


turmoil, take calculated 
risks and balance the need for speed 
with the need for discipline and quality. 
These aren't things you learn froma 
textbook. STORIES BEGIN ON PAGE 35. 


ONLINE EXCLUSIVE 
Firms Brace for H-1B Hiring 


vest in upgrades. Their com- 
ments back up survey results 
released by consulting firm 
AMR Research Inc., which 
said in its report that IT man- 
agers are becoming “furious” 
about maintenance costs and 
upgrade policies. 

A sizable number of the 202 
survey respondents are start- 


ing to act on their anger, ac- 
| 


cording to AMR analyst Jim 
Shepherd. For example, one- 
third said they plan to ask ven- 
dors to renegotiate their soft- 
ware maintenance contracts. 
And more than 20% indicated 
Business Apps, page 53 


SOURCE: AMR RESEARCH INC 





Evaluate your project management 
office by taking this online quiz. 


QuickLink a4040 
www.computerworld.com 


Freeze as Visa Limit Looms 


| Cutoffmay improve job 


outlook for U.S. workers, 
or drive more offshoring 


| BY PATRICK THIBODEAU 


U.S. immigration officials may 
discontinue this year’s H-1B 
visa application process as 
early as this week, shutting 
down a key pipeline for com- 
panies that hire foreign high- 
tech workers. 

Congress reduced the 
H-1B cap to 65,000 for 
the current federal fiscal 
year after having set it at 
195,000 for each of the 
previous three years. 

U.S. immigration offi- 


INSIDE 


STE 
PTT toe 
ems) 
Coe et 
Os 
Le 


cials haven't announced a def- 
| inite cutoff date and are saying 
| only that they expect the cap 
to be reached by the end of 
| March. However, immigration 
| experts and sources familiar 
| with the U.S. Citizenship and 
| Immigration Services visa 
| process told Computerworld 
| that the cap has already been 
| reached and that they’re brac- 
| ing for the cutoff. That means 
new H-I1B visas won't be 
available until the next 
fiscal year begins Oct. 1. 
The imminent shut- 
down wasn’t unexpect- 
ed by immigration ex- 
perts, since authorities 
H-1B Freeze, page 53 








WHICHEVER PATH YOU CHOOSE — Client-Server 


or |P-enabled Telephony — you'll make the most 
of your existing equipment and applications 
with Avaya. Keep up to 85%* (or more!) with 


our open standards-based solutions and 
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multi-vendor, multi-technology expertise. The 


- 


world leader in IP Telephony offers you the 
flexibility to support a diverse set of endpoints 
J t 


IP, digital, analog and mobile. As well as voice 


encryption for maximum security anywhere on 


axa 


AVAYA 


your network. We've even got flexible s« 

for greenfield installations. Alls 

Avaya Global Services. So start moving to IP 
without the heavy lifting at avaya.com/iptelephony. 
Or call 866-GO AVAYA today 


Migrate to IP Telephony. 


KEEP 89% 


Op your current investment. 


NIX THE FORKLIFT. 





Simply log in and dial in and 
collaborate like never before 


Can support multiple presenters and concurrent 


eetings with up to 2,500 participants per session 


9 layers of security, SSL service 
and 128-bit encryption 


Whether you’re 3 offices or 3,000 miles apart, now you can collaborate as if you're all at the same table. 
All thanks to Microsoft® Office Live Meeting. The new service that lets you meet with groups of 2 up to 
2,500, without leaving your desk. With just a phone, a PC and an Internet connection you can hold quick, 
impromptu staff meetings, discuss trends with fellow IT professionals, even roll out new technology initiatives 
enterprise-wide. All in real time. 


Plus, it’s a hosted service so there are no costly infrastructure changes or headaches for your IT department. 
It's a big part of what makes the new Microsoft Office System so different. See for yourself. You'll save time, save 
money and maybe even earn yourseif the title of office superhero. 
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Innovation Democracy 


In the Management section: Nancy Snyder 
(left) and others at Whirlpool are using IT 
to make innovation a core competency and 
build a supply chain of new ideas that turn 
into successful consumer products. Page 31 


PeopleSoft users are buoyed 


by a DOJ recommendation but 
acknowledge that Oracle’s 
hostile bid isn’t finished yet. 


Cisco announces a wireless 
LAN security protocol de- 
signed to block attacks that 
threaten its LEAP user au- 
thentication technology. 


A passenger-screening sys- 
tem for airline security faces 
significant testing and deploy- 
ment delays, the GAO says. 


VoIP could be regulated as a 
public utility, concludes a Cal- 
ifornia commission. 


) J.C. Penney will install up- 
graded application perfor- 
mance monitoring software 
to help track the status of IT 
service-level agreements. 


Networking and security 
technology convergence finds 
support in an IBM/Cisco part- 
nership and Juniper’s acquisi- 
tion of NetScreen. 


Q&A: IBM and Sun executives 
face off over the development 
of a common tools framework 
for Java. 


ONLINE 


ONLINE @ Onsome 


pages in this issue, 
DEPARTMENTS yout see a Quick- 
Breaking News i 


Link code pointing 

© QuickLink 21510 —_gadditional, relat- 

Har G,henintinne ed contention our 
Newsletter Subscriptions 
© Quicklink 2430 | Wepste-sustere 
_ 
Knowledge Centers our Quicklink box, 
@ Quicklink a2570 — whichyoullseeat 
ree 


Computerworld Store onoursite. 
© QuickLink 22420 


What's a 


OPINIONS 


8 On the Mark: Mark Hall ex- 
plains how ISPs will work 
together to fight spam. 


20 Maryfran Johnson notes that 
while Oracle’s quest for Peo- 
pleSoft has dragged on, both 
companies have made major 
moves to keep users happy. 


20 Pimm Fox argues that no 
company is too small to save 
money using ERP technology 
in the era of ASPs. 


21 Thornton A. May asks, How 
do IT leaders gain C-level ac- 
ceptance? By getting vendors 
to spend money in ways that 
matter instead of on T-shirts. 


28 Robert L. Mitchell believes 


IT security could be vastly 


improved by removing the op- 


portunity for hackers to com- 
mandeer thousands of PCs. 


33 Barbara Gomolski warns that 
shortsighted IT decisions 
have inherently long-term 
consequences. Areas likely to 
cause problems: underinvest- 
ing in IT, and offshoring. 


54 Frankly Speaking: Frank 
Hayes says AT&T delivered 
some bad news — in 1985 — 
regarding SCO’s claims of 
owning derivative code al- 
leged to exist in Linux. 

DEPARTMENTS/RESOURCES 

At Deadline Briefs 

News Briefs 

Letters 

IT Careers 

Company Index 

How to Contact CW 

Shark Tank 
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Retrieval Realities 
in the Technology section: Regulations, capacity 


issues and litigation are forcing companies to 


spend IT dollars on e-mail archiving, but there 


are myriad choices to make, from policy options 
to in-house vs. outsourced systems. Page 25 
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The Resourceful 
Project Manager 


This special report examines 
the ways that IT project man- 
agers cope when business pres- 
sure builds to finish IT projects 
fast or executive sponsors leave 
the project in a lurch. Managers 
also share why 
learning by doing 
beats academic 
training any day. 
PACKAGE BEGINS ON PAGE 35. 


- 36 Balancing Act. Proj- 
ect managers are learn- 
ing to keep pace with 

business by using agile 
fN\ | project management 
> approaches. But they’re 
fe ¥ not giving up adequate 
* testing and quality as- 
surance in exchange for 
speed. Also, leaders of project 
management offices say position- 
ing their members as mentors and 


facilitators helps to ease tensions 
with frontline managers. 


38 Careers: Forget project manage- 


ment by the book. The most valu- 
able lessons are learned and then 
applied over and 

over on the job, 

according to 

veteran project 

leaders like 


John Kocon. Sh, 


40 Surviving the Sponsor Exit. 


When projects fail, it’s often at 


loss of business spon- 
sorship or change in 
sponsors. Here’s how 
to keep your proj- 
ect on track 
if your spon- 
sor disappears. 


42 The Almanac: Brief items about 


software project failures, mid- 
course corrections, project man- 
agement offices and 

i 


the Software Project &£ 
Bill of Rights. i] 


46 Opinion: The best 


project managers 

have a lot of fine traits. The most 
useful one might be their ability 
to circumvent the system, says 
columnist Mark Hall. 


Evaluate Your PMO 
Take this online quiz 
to see if your project 
management office is 
on the right track. 


© QuickLink 24040. 


10 Tips for a Web 
Redesign. In an ex- 
cerpt from Web Rede- 


sign: Workflow That 
Works, Kelly Goto and 
Emily Cotler offer ad- 
vice on a site redo. 


© QuickLink 43746 


How to Track Proj- 
ect Status. Johanna 
Rothman suggests 
breaking projects into 


small parts to monitor 
progress. @ QuickLink 
44682 


Plan for Committed 
Action. Involve your 
team in creating your 
project plan, advises 
Esther Derby. 

@ QuickLink 44679 





NEWS 


gy PeopleSoft Users W. 
Despite Blow to Oracle 


| DOJ staff says agency should block 
takeov er bid; E ‘lison remains confident 


Windows re Is 
Posted on Internet 


Microsoft Corp. confirmed that 
some of the source code for Win- 
dows NT and 2000 was posted 
on the Internet without its knowl- 
edge. The company said it’s not 
aware of any effect on users from 
the leak, which is being investi- 
gated by the FBI. Microsoft added 
that there were no signs of an in- 
trusion into its corporate network 
or a breach of internal security. 


IRS Blocks CSC 
From New Projects 


The Internal Revenue Service said 


it will bar Computer Sciences 
Corp. from bidding on two up- 
coming IT projects because it is 
dissatisfied with the El Segundo, 
Calif., company’s handling of an 
ongoing technology moderniza- 
tion effort. Both CSC and the IRS 
were criticized for the slow prog- 
ress on the current project in a 
report issued by the tax agency’s 
oversight board in December 
[QuickLink 43506]. 


GAO Says Feds 
Lack IT Oversight 

In other government news, the 
U.S. General Accounting Office 
said in a report that less than haif 
of the IT management practices 
required by Congress have been 
put in place at federal agencies. 
IT goals “are not always linked to 
specific performance measures,” 
the GAO said in its report, which 
was requested by three Republi- 


can legislators. (For more details, 
go online: QuickLink a4060). 


Short Takes 


SUN MICROSYSTEMS INC. said it 
will offer subscription-based pric- 
ing on more of its products, in- 
cluding computer hardware and 
storage. .. . SAP AG and Atlanta- 
based COCA-COLA ENTERPRISES 
INC. said they plan to jointly de- 
velop a suite of distribution and 
equipment-servicing applications 
for the beverage and consumer- 
goods industries. 


BY MARC L. SONGINI 
S. DEPARTMENT of 
Justice staffers last 


week recommended | 
fight for control of PeopleSoft 
| is over. 


that the agency 

block Oracle Corp.’s hostile 

| offer to buy rival PeopleSoft 

| Inc. But Oracle CEO Larry El- 
lison remained upbeat about 

| the deal’s prospects, and sev- 

| eral PeopleSoft users said it’s 

| too soon to declare victory — 
as much as they would like to. 

“I won't be able to relax un- 

til they drive a stake through 
the heart of this deal,” said 

| Dave Hyzy, director of IT at 
Benderson Development Co., 
a real estate developer based 

| in Buffalo, N-Y. Hyzy uses Peo- 

| pleSoft World, the green- 

| screen business applications 

| that PeopleSoft acquired when 
it bought J.D. Edwards & Co. 

| Jim Prevo, CIO at Green 

| Mountain Coffee Roasters Inc. 
in Waterbury, Vt., agreed that 


Cisco Offers New Security | 


| Force (IETF) for inclusion in 


goal,” 


the recommendation by the 


| DOJ’s staff to oppose the 


takeover bid on antitrust 
grounds doesn’t mean that the 


“It’s always great to score a 
said Prevo, who runs his 
systems on PeopleSoft’s flag- 
ship Enterprise software. “But 


| the game’s not over until the 

| final buzzer sounds. At some 

| point, I'd like to hear Larry El- 

| lison say he is no longer offer- 
ing to buy PeopleSoft.” 


| Still in the Game 

| Ellison didn’t say anything of 
| the kind last week while 

| speaking in Santa Monica, 


Calif., at an IT conference or- 


| ganized by Merrill Lynch & 
| Co. The DOJ has yet to make a 
| final decision on Oracle's $9.4 


billion offer, he noted. “We 


| have made a good case,” he 
| said. “We think we will clear 


Protocol to Guard WLANs 


Alternative to 
| LEAP can block 
| dic tionary, attacks 


| BY BOB BREWIN 
Cisco Systems Inc. last week 
announced that it has devel- 
| oped a new wireless LAN se- 
| curity protocol designed to 
| ward off attackers who use 
| brute-force techniques to dis- 
| cover user passwords. 
The so-called dictionary at- 
| tacks are a threat to Cisco’s 
existing user authentication 
| technology, the Lightweight 
| Extensible Authentication 
Protocol (LEAP). But Ron 
| Seide, the company’s WLAN 
| product line manager, said the 
| new protocol protects against 


| dictionary attacks by sending 
| prs 
authentication data through a 


secure, encrypted tunnel. 
Seide added that the new 


| technology also eliminates the 
| need for IT managers to in- 


stall separate servers to han- 


venience and flexibility with 
the password-protection tun- 
neling of PEAP,” he said. 

The combined approach is 
formally called the Extensible 
Authentication Protocol-Flexi- 
ble Authentication via Secure 
Tunneling (EAP-FAST). Cisco 





| WLAN security al- 
| ternatives. The 
dle the digital certificates used | 
| by another WLAN security 

| system, the Protected Extensi- 
| ble Authentication Protocol 

| (PEAP). Cisco is trying to 

| bring together “some of the 

| key advantages of LEAP’s con- 


| LEAP came to light 
| last August, when Cisco is- 


Key Dates 
rs 


The DOJ is expected to 
announce whether it will 
file suit to block Oracle’s 
takeover bid because of 

antitrust concerns. 


ar 
PeopleSoft’s shareholders 
are due to vote on opposing 
slates of directors nominated 
by the two companies. 


| {the DOJ review], and we will 
| be able to buy PeopleSoft.” 


During a press conference 


| at Oracle’s AppsWorld show 


last month, Ellison left open 
the possibility of taking legal 
action against the DOJ if it 
does seek to block the take- 
over bid in court. But he said 


| that would be up to Oracle’s 
| board. When asked last week 


about the potential for a legal 
battle with the DOJ, a compa- 


| ny spokeswoman said that El- 


submitted a draft version to 
the Internet Engineering Task 


the upcoming 802.1x WLAN 
security standard, and it plans 


| to make the protocol available 

| for free download next month. 
Seide said Cisco will contin- 

| ue to support = 


PEAP and LEAP as MORE THIS ISSUE 


Cisco and IBM partner up to 
address integration issues. 


threats against 


sued a warning after it was 


| told by a security researcher 
| that he had developed a tool 
| for launching dictionary at- 

| tacks [QuickLink 41843]. 


Mark Wiesenberg, director 


| of network services at Cisco 


user Sharp HealthCare in San 
Diego, said he will “track how 
this proposal is received by the 
IETF and evaluate a position 
based on industry acceptance.” 
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lison “is on the record with his 
personal opinion, but Oracle 
Corp. has not made any state- 
ment about this.” 

Mitch Meyers, vice presi- 


| dent of operations at FW. Mur- 
| 


phy Control & Instrumenta- 
tion Solutions in Tulsa, Okla., 
said that ever since the take- 
over bid was launched last 
June, he has thought it unlike- 
ly that Oracle would succeed 
in buying PeopleSoft. But 
Meyers added that he hopes 


| the situation will become less 


uncertain after the DOJ makes 
its decision. The agency is ex- 
pected to do so by March 2, 
according to PeopleSoft. 
“Hopefully, starting in early 
March, we can put this issue 
behind us,” said Meyers, who 
noted that he told DOJ offi- 
cials last fall “the competitive 


| environment would be dam- 


aged” by a takeover. FW. Mur- 
phy, which makes industrial 
gauges and switches, is a J.D. 


Edwards user. @ 44758 


RELATED COVERAGE = 


Oracle's user-friendly changes 
are no coincidence, says Maryfran Johnson 
in her editorial on page 20. 


Oracle exec Chuck 
Phillips will state the company's case at a 
meeting of J.D. Edwards users 


QuickLink 44802 
www.computerworld.com 


Sharp HealthCare uses both 


| ‘ . xs 
| wired and wireless Cisco 
| equipment on its network. 


Joshua Wright, a systems 
engineer and deputy director 


| of training at the SANS Insti- 


tute in Bethesda, Md., devel- 
oped the automated dictio- 
nary-attack tool 
while working at 
Johnson & Wales 
University in Prov- 
idence, R.I. Wright 
called EAP-FAST 
“an excellent alternative” to 
LEAP, PEAP and EAP-tTrans- 


| port Layer Security, which 


Cisco also supports. 
Wright had planned to pub- 


| licly release his LEAP attack 


tool this month. But he said 
that Cisco asked him to delay 
the release and that he agreed 
to do so “as long as Cisco con- 
tinues to work toward provid- 
ing a secure alternative to 


LEAP users.” @ 44779 
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Airline Passenger Screening 
System Faces Deployment Delays 


Unauthorized acce: 


BY DAN VERTON | 
WASHINGTON | 
The General Accounting Of- 
fice warned last week that the 
Transportation Security Ad- 
ministration’s high-tech sys- 
tem for screening airline pas- 
sengers for terrorist connec- 
tions faces significant testing 
and deployment delays. 

According to the GAO re- 
port, the TSA has not only 
fallen behind in testing the 
new Computer-Assisted Pas- 
senger PreScreening System 
(CAPPS ID), but it also has yet 
to fully identify all of the func- 
tions it would like the system 
to perform [QuickLink 37392]. 
In addition, the report says the 
TSA has not yet completed 
work on at least seven key 
technical challenges that 
could stand in the way of the 
system’s final deployment, in- 
cluding measures to protect 
the system from unauthorized 
access and a means of assess- 
ing the accuracy of databases. 

“These issues, if not re- 
solved, pose major risks to the 
successful deployment and 
implementation of CAPPS II,” 
the GAO concluded. 


‘Scoring’ Risk 

In a written response to the 
report, Janet Hale, undersecre 
tary for management at the 
Department of Homeland Se- 
curity, said the CAPPS II sys- 
tem can now receive data from 
the Airline Data Interface, 
cleanse and format the data, 
perform a risk assessment and 
then assign a risk “score” to 
individual passengers. 

But because the TSA isn’t 
yet authorized to test the 
system using real passenger 
names and data, the DHS 
hasn't been able to advance 
system development beyond 
its current state, said Hale. 

Some airline security ex- 
perts claim the U.S. runs a ma- 
jor risk by focusing on infor- 
mation technology and other | 
high-tech solutions to uncover | 


ss possible, GAO says 


terrorist plots against airports 
and airlines. 

Because the terrorist threat 
against airlines is a relatively 
new experience in the U.S., 
“there is a tendency to solve 
problems through the use of 
technological means,” said 
Rafi Ron, president of New 
Age Security Solutions in 
Washington and former head 
of security at Ben Gurion Air- 
port in Tel Aviv. “Focusing on 
technology sometimes makes 
you lose your overall perspec- 


tive. That can lead to unbal- 


| anced planning, unbalanced 


investment and misuse of 
funds.” 
Instead of relying on IT sys- 


| tems for the bulk of security 


monitoring, Ron said airport 
authorities should train per- 
sonnel in behavior pattern 
recognition, a technique that 
has been highly successful in 
Israel. 

So far, Boston’s Logan Inter- 
national Airport has taken the 
lead in the U.S. when it comes 


| to offering training in behav- 


ior pattern recognition. 


wea eee ett ae Oem Ur ee mt) 
PMR ee Me Be mec toe 


At Logan, law enforcement 
personnel now study the be- 
haviors of airline passengers 
in public areas and look for 


suspicious activity — the 
exact details of which remain 
secret for security reasons. 


© 44772 


Turnover Increase Hits the Ranks of State ClOs 


I'l’ execs resign in 
N.H., Florida as 
cost issues surface 


BY THOMAS HOFFMAN 
The increased financial scruti- 
ny that many IT departments 
are facing isn’t limited to the 
private sector. 

Since last August, the CIOs 
of at least five state govern- 
ments have resigned. Some 
left to pursue corporate job 
opportunities or departed be- 
cause another political party 
came into power. But the 
changing of the guard is a re- 
flection of the intense pres 
sures that public-sector CIOs 
are under to slash costs, said 
Jim Krouse, an analyst at In- 
put, a Reston, Va.-based mar- 
ket research firm. 

“There’s just a tremendous 
amount of turnover lately at 
the state CIO level,” Krouse 
said. CIOs “are under pressure 
to cut costs like department 
heads for other government 
agencies,” he added. 

Robert Anderson, the outgo- 
ing CIO in New Hampshire, is 
a prime example. Anderson 
was tapped to fill the state's 
top technology post last Feb- | 
ruary by his former boss in the 
corporate world — Gov. Craig | 
Benson, once the CEO of now- | 


defunct Cabletron Systems 
Inc. But Anderson didn’t de- 
liver $11 million in expected 
savings in his first year, and he 
resigned in late January, on the 
day he was expected to pre- 
sent legislators with examples 
of his cost-cutting work. 

A high-ranking Granite 
State IT official who request- 
ed anonymity said he thinks 
Anderson “was set up to fail.” 
The CIO “was heading in the 
right direction,” the official 
said. But, he added, a first-year 


Exit Pols 


ROBERT ANDERSON, New 
Hampshire: Resigned in late 
January, after expected reduc- 
tions in IT costs didn’t materialize. 


KIMBERLY BAHRAMI, Florida: 
Resigning effective Feb. 27 
following criticism of IT contracts 


CHAD MCGEE, Louisiana: 
Resigned on Feb. 13 after a 
new governor took office. 
CAROLYN PURCELL, Texas: 
Left on Aug. 31 after nine years 


ALDONA VALICENTI, Ken- 
tucky: Resigned in November 
after six years as CIO to become 
a vice president at Oracle. 


savings goal of $1 million 
would have been more realis- 
tic. The state’s IT budget is 
about $39 million. 

State Sen. Dick Green, who 
chairs the legislature’s finance 
committee, said Benson and 
his budget director originally 
suggested that Anderson 
could chop $20 million in IT 
costs during his first year on 
the job. But legislators viewed 
that proposal as “too opti- 
mistic” and substituted the $ll 
million goal, Green said. 

The targeted cost savings 
“haven't materialized, and we 
kept the accountability pres- 
sure on him,” Green said, re- 
ferring to Anderson. “I think 
he was trying, but he wasn’t 
able to give us any concrete 
evidence that this was being 
accomplished.” 

Anderson couldn’t be 
reached for comment last 
week. A spokesman for Ben- 
son said the $11 million cost- 
cutting figure surfaced after 
the legislature began review- 
ing the governor’s budget pro- 
posal for the current fiscal 
year. He added that Benson 
“was very pleased with the 
work [Anderson] did,” point- 
ing to the former CIO’s efforts 
to consolidate 300-plus IT 
workers at nine state agencies 
into a single unit. 


Anderson isn’t the only 
state IT chief who has felt the 
heat. On Feb. 4, Kimberly 
Bahrami announced that she 
would resign as Florida’s CIO 
at the end of next week. 

Bahrami was named CIO in 
July 2002, after holding the job 
on an acting basis for a year. 
But Florida’s IT organization 
has come under fire from leg- 
islators and government 
watchdogs regarding $150 mil- 
lion in multiyear contracts. 
Some officials say the contract 
language is vague and could 
put the state at financial risk. 

“Tt’s been a major concern 
among legislators about how 
we got into some of these con- 
tracts and whether we'll be 
able to recoup some of the 
costs if any of these systems 
fail,” said state Sen. Walter G 
“Skip” Campbell, who chairs 
the state’s Democratic caucus 

Bahrami didn’t return calls 
seeking comment. Carla 
Gaskin, a spokeswoman for 
the Florida Office of Informa- 
tion Technology, confirmed 
that there have been audits of 
IT contracts but said that she 
thinks all of the contracts in 
question were awarded prior 
to Bahrami’s tenure as CIO. 
Gaskin added that Bahrami is 
leaving the job “by her 


choice.” Q 44781 
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Sun Agrees to Buy 
Server Vendor . . . 


Sun Microsystems Inc. plans to 
acquire Kealia Inc., a Palo Alto, 
Calif.-based company led by Sun 
co-founder Andy Bechtolsheim. 
Kealia is designing servers based 
on Advanced Micro Devices Inc.'s 
Opteron processor. As part of the 
deal, Bechtolsheim will rejoin 
Sun as senior vice president and 
chief architect for its Volume 
Systems Products group. The fi- 
nancial terms weren't disclosed. 


_.. And Plans for 
Solaris Upgrade 


Sun also plans to ship a Solaris 
operating system upgrade by 
year’s end. Solaris 10, which 
was previewed as part of a 
wider product rollout [QuickLink 
44685], will include new fea- 
tures such as the ability to parti- 
tion servers without installing 
multiple copies of the operating 
system. Sun didn’t say whether 
it will increase the software's 
price when the upgrade ships. 


J.D. Edwards Chief 


Joins Blade Vendor 


Robert Dutkowsky, the top exec- 
utive at J.D. Edwards & Co. until 
it was acquired by PeopleSoft 
Inc. last summer, has joined 
blade server vendor Egenera Inc. 
as chairman, president and CEO. 
Dutkowsky replaces Vern Brown- 
ell, who founded Marlboro, 
Mass.-based Egenera in 2000 
and will remain at the company 
as its executive vice president 
and chief technology officer. 


hort Takes 


PEOPLESOFT released an up- 
grade of the PeopleTools sys- 
tems management software that 
works with its flagship People- 
Soft Enterprise line of business 
applications. . .. SAP AG named 
John Barry, a retired major gen- 
eral in the U.S. Air Force, to head 
a worldwide sales effort aimed 
at military and homeland securi- 
ty applications. 


MARK HALL #® ON THE MARK 


ISPs Can Slam 
Spammer Profits ... 


... With new technology that sits on a service provider’s network bor- 
ders and slows spam progress to a costly, slothlike pace. Called Edge GX 
and developed by Openwave Systems Inc. in Redwood City, Calif., the 
Linux- or Solaris-based software is the outgrowth of an ad hoc Inter- 
net service provider and vendor organization founded last fall with a 
decidedly uncatchy name, Messaging Anti-Abuse Working Group, and 


an even less melodic acronym, MAAWG. 
Although short on literary or phonetic style, 
the group is long on clever ideas to hinder 
spammers, such as getting ISPs to work 
together to fight pernicious unsolicited 
e-mail. “We don’t defend against spam 
the same way carrier to carrier,” observes 
Todd Dean, director of data operations 
and support at Cox Communications Inc. 
in Atlanta. But with the frightful costs of 
unnecessary bandwidth, server and stor- 
age capacity to handle spam, ISPs need a 
coordinated strategy, Dean says. He 
added that he and his 
competitors have seen the 
light and will begin to use 
common weapons to di- 
minish, if not eliminate, 
spam. Edge GX is the first 
tool developed under 
MAAWG’s auspices. Ac- 
cording to Richard Wong, 
general manager of Open- 
wave’s messaging group, 
the software has two key 
features specifically for 
service providers. The first 
is called Receipt-To: Har- 
vester. Again, you can 
question the less-than- 
snappy name, but not the 
cool technology. This fea- 
ture keeps track of mes- 


| 





NTA elece Ney uel 
Technologies Inc. inSan 
Jose tomorrow will ship Re- 
lease 7 of its Unified Test 
Pro, a software analysis and 
testing tool. Designed for 
testers who aren’t neces- 
sarily programmers, the 
software uses keywords tied 
to business processes to au- 
tomatically inspect code. 
The new release adds a full 
integrated development en- 
Nee Ru EL Cee | 
business processes. Pricing 
Cla CE Leslee Schell as rm 


sages bounced back to an IP address, the 
inevitable result of classic dictionary at- 
tacks. If those mail-return numbers are 


| beyond what the ISP deems legitimate, it 


will slow the rest of the outgoing messages 
from the spammer, “so much that it will 
take a decade to get through,” claims 


| Wong. The second technique looks at 


outbound mail traffic from a source: If 
it’s outside normal behavior, it slows 


| down message processing. If the queued 


messages continue to pile up, the oddly 
named Rate-Limiting Tarpitting feature drops 
the spammer connection 

for as little as a millisec- 
ond or as long as an hour, 
adding costs and hassles to 
spammers. For once. Edge 
GX hits the streets today. 
® Service providers aren’t 
just your spam-fighting 
buddies. They can also be 
your source for call center 
technology. Using a PC and 
VoIP, call center agents ac- 
cess an JSP-based infra- 
structure provided by 
CosmoCom Inc. for in- 
bound or outbound call 
activities. The Melville, 
N.Y.-based company deliv- 
ers everything from pre- 
dictive dialing to voice- 


California Signals Intent to Regulate VolP 


recognition technology. Currently ship- 
ping Version 4.3, the company is working 
on a 5.0 upgrade that will pump up call 
capacity, improve e-mail integration and 
offer better speech recognition. If you’re 
calculating the costs of investing in your 


| call center’s systems, consider putting $300 


to $500 in one of your spreadsheet’s cells. 
That’s what CosmoCom claims it costs 
per month, per agent to use the call cen- 
ter service. ® With your spam-fighting 
and call center operations now function- 
ing somewhere on the Internet, you 
might as well toss your integration work 
out there as well. At least as far as Web ser- 
vices are concerned, argues Halsey Minor, 
CEO of Grand Central Communications 
Inc. He says standards such as the Busi- 
ness Process Execution Language make 
it possible for his San Francisco company 
to exist. Grand Central gathered and cat- 
egorized a variety of business-oriented 
Web services. It mediates the protocol 


| and data-format variations that inevitably 


reside in a vendor’s implementation of a 
standard. That makes it safer for you to 
pick and choose a service to integrate 
into your application. By summer, Minor 
says, Grand Central will be able to “em- 
pirically determine the reliability” of any 
public or private Web service, a useful bit 


| of information when creating service-level 


agreements. ® Today, Teradata, a sub- 
sidiary of NCR Corp. in Dayton, Ohio, 
unveils its Data Warehouse Maturity As- 
sessment service. Teradata consultants 
have devised a scorecard that shows the 
six stages and 28 processes involved 

in how effectively a company uses its 
data warehouse for business intelli- 
gence. Mark Shainman, an analyst at 
Meta Group Inc. in Stamford, Conn., says 
many companies deploy “their analytical 
infrastructure in a quick-and-dirty fash- 
ion,” which leads to significant ineffi- 
ciencies in data warehouse usage. Tera- 
data says its consultants “are database- 
agnostic.” Always a good idea to keep reli- 





gion and technology separate. @ 44756 


| $183 million to $407 million in 
revenue. The commission ex- 
pects a final decision to be 
made within 18 months. 


| BY JORIS EVERS 

| The California Public Utilities 
| Commission (CPUC) has ten- 
| tatively concluded that voice 


over IP services that connect 


| with the traditional phone 


network are public utilities 


| and subject to its regulatory 


authority. 
The panel unanimously vot- 


| ed to investigate a regulatory 
| framework for Internet tele- 


phony services, according to 


the order approved last week. 
| The CPUC predicts that VoIP 
| could account for as much as 
40% of intrastate telecommu- 
| nications revenue in Califor- 
| nia by 2008. 

Executives of VoIP service 
providers such as Vonage 
Holdings Corp. in Edison, N_J., 

| have warned that regulation 
could stifle growth of such 
| services and increase costs. 
To date, VoIP providers in 


California haven’t been cov- 
ered by the regulations affect- 
ing traditional telecommuni- 
cations companies. VoIP 
providers haven’t had to make 
the same contributions to 
state funds, pay interconnec- 
tion charges or provide access 
to the emergency number 911. 
The CPUC estimates that by 
2008, if the rules on these con- 
tributions don’t change, cer- 
tain state programs will lose 


Separately, the Federal 

| Communications Commission 
| last week began proceedings 
seeking comments on the ap- 
propriate regulatory treatment 
of VoIP. The FCC has suggest- 
ed that VoIP services should 
continue to be subject to mini- 
mal regulation. @ 44770 

| Evers writes for the IDG News 
Service. 
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Better Grip on SLAs 


Retail chain will use upgraded tool to 
ensure that IT meets performance goals 





BY MATT HAMBLEN 
ETAILER J.C. Penney 
Co., which uses ap- 
plication perfor- 
mance monitoring 
software developed by Net- 
QoS Inc., plans to upgrade to a 
new version being announced 
today, to help ensure that it 
complies with IT service-level 
agreements (SLA) nationwide. 

J.C. Penney plans to install 
SuperAgent Version 5 from 
Austin-based NetQoS in April, 
after having used prior releas- 
es for nearly two years, said 
Barry Hicks, head of perfor- 
mance management at the 
Plano, Texas-based depart- 
ment store chain. 

SLAs are becoming “stra- 
tegically important” to the 
company as it tries to under- 
stand what levels of perfor- 
mance end users will experi- 
ence on various applications, 
Hicks said. 

“Today, we can only approx- 
imate,” he explained. “Having 
a verifiable user response time 
is something we consider to be 
mission-critical to our opera- 
tions as we move more and 
more to client/server and 
Web-based applications.” 

J.C. Penney currently runs 
SuperAgent Version 4 on 20 
hardware appliances and uses 
the software to measure the 
performance of all applications 
at more than 1,000 department 
stores and nearly 2,800 drug- 
stores operated by its Eckerd 
Corp. unit. The NetQoS tools 
also monitor the corporate and 
Eckerd Web sites, said Ginger 
Elliott, manager of network 
technologies at J.C. Penney. 

The company picked Super- 
Agent two years ago because 
the technology didn’t require 
it to install client software on 
tens of thousands of desktop 
PCs and other end-user de- 
vices, Elliott said. “Frankly, a 





lot of our users are not very 
skilled at loading applica- 
tions,” she said. “We were run- 
ning into performance issues 
on the client side, but the only 
tool we could use was multi- 
ple sniffers.” 

There are about 80 man- 
agement software vendors 
that sell SLA measurement 
tools, said Rick Sturm, an ana- 
lyst at Enterprise Management 


| Associates in Boulder, Colo. 


The major vendors include 
Computer Associates Interna- 
tional Inc., Hewlett-Packard 


Bank adds BEA 
middleware to 
integrate systems 


BY LUCAS MEARIAN 

Wells Fargo & Co. is investing 
in a major upgrade of its on- 
line applications for corporate 


| banking customers in an effort 


to make the Web-based ser- 
vices easier to use. Analysts 


| said the project is part of a 


trend that’s helping to push IT 


| spending upward in the entire 
| wholesale banking industry. 


Steve Ellis, executive vice 
president of Wells Fargo’s 
wholesale services group, last 
week said the upgrade of the 
4-year-old Commercial Elec- 


| tronic Office (CEO) online 


service began on a pilot basis 
in December and will start to 
go live over the next several 
months. But he added that the 
upgrade is expected to take up 
to two years to complete. 
Wells Fargo is using BEA 


| Systems Inc.’s WebLogic at the 
| presentation level to port 
| back-end applications to the 


home page for presentation to 


| business customers. 





| 
| 
| 
| 
| 


| payments annually. 





Co. and IBM’s Tivoli unit. 

But Sturm said one differen- 
tiator for SuperAgent Version 
5 is that it gives network man- 
agers “actionable informa- 
tion,” meaning that if perfor- 
mance on an application was 
to slow down, an IT manager 
could identify the precise port 
on a switch or server that is 
causing the problem. 


Setting Expectations 
SuperAgent and a related 
product called ReporterAna- 
lyzer have helped J.C. Penney 
track the cause of performance 
problems and determine 
whether they are the result 

of network or application is- 


Currently Wells Fargo is 
rolling out an internal version 
of CEO for its employees, to 
give them a more consolidated 
view of customer data. 

CEO is used by about 140,000 
end users at Wells Fargo’s cor- 
porate clients to view account 
information and bank state- 
ments and to ac- 
cess money-trans- 
fer services and an 
automated clear- 
inghouse that proc- 
esses about $6 tril- 
lion in electronic 


Wells Fargo is upgrading 


| CEO and installing WebLogic 


to tie together disparate appli- 
cations and create integrated 
business processes and data 


| workflows. “We are an infor- 
| mation-rich company, but 


there’s so much information 
that it’s sometimes hard to find 


| what you need,” Ellis said. “So 
| we're grabbing it and pushing 
it upfront to the person who 


needs it, so they can do their 
job faster.” 

For example, BEA’s software 
will enable users to access 


business systems directly from | 


| disclose what they 





FINANCE CENTRAL 
For more about IT in the 
financial services industry, 
visit our Web site: 


@ QuickLink q3670 
www.computerworld.com 





sues, Elliott said. 
With such informa- 
tion, the retailer is 
better able to plan 
for growth, espe- 
cially as more de- 
mands are placed 
on its Web sites, she 
noted. 

SuperAgent Ver- 
sion 5 is available 
now and starts at 
$34,500. J.C. Penney 
officials wouldn’t 


have invested in 
NetQoS’s products, 
but Elliott said the 
cost savings have 
been “tremendous.” 
It would have cost “exponen- 
tially more” to deploy and 
maintain agent software on 
PCs, she added. 

Jack Mendell, a network an- 
alyst at Watkins Motor Lines 
Inc. in Lakeland, Fla., said the 
trucking company has spent 


‘Wells Fargo Upgrades Online Apps 


the CEO home page. Users 
will also be able to tailor the 
online service to fit their busi- 
ness needs, and Ellis said the 
new system will include built- 
in workflow applications and 
IT security features such as 
end-user authentication. 

Ellis wouldn’t disclose the 


grade, but he said 
that putting the 
budget “in the mil- 
lions would be low. 
It was a big proj- 
ect.” He added that 
San Francisco- 
based Wells Fargo got a return 
on its investment within a 
year of completing the origi- 
nal CEO rollout and expects 
no less than that from the on- 
going upgrade. 


Spending Drivers 
The wholesale banking indus- 
try has traditionally lagged far 
behind retail banks in deploy- 
ing Web-based applications 
and other leading-edge tech- 
nologies, according to Lee 
Kidder, an analyst at Tower- 
Group in Needham, Mass. 
Wholesale banking has be- 


We 
were 
running into 
performance 
issues on the 
client side. 


Ginger Elliott, 
manager of net- 
work technologies, 
J.C. Penney Co. 


total cost of the up- 
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about $100,000 on 
NetQoS tools. Last 
month it began run- 
ning SuperAgent 
Version 5 as a beta 
tester to monitor the 
SLA performance of 
applications at 135 lo- 
cations with a total 
of 2,000 end-user 
terminals. 

Products to mea- 
sure SLAs, both for 
internal business 
units and network 
service providers, 
are becoming essen- 
tial, Mendell said. 
“Users are looking 
more at us now as 
providers of a utility, and they 
want good quality,” he said. 
“They used to worry [only] if 
the network was up or down, 
but now they say, ‘I’m happy 
you've gotten it to me, but I 
want it in three seconds in- 


stead of five.” @ 44780 


come an increasingly volatile 
business because of a 15% 
drop in demand for commer- 
cial loans over the past three 
years, TowerGroup said in a 
report released last November. 
It also reported that once-loy- 
al corporate customers now 
shop around for the best fi- 
nancing deals and are de- 
manding better service and 
Internet-based technology 
from banks. 

But TowerGroup predicted 
in the report that after years of 
IT spending stagnation, U.S. 
wholesale banks will increase 
their overall technology in- 
vestments by 6% this year 
compared with 2003. 

Kidder said four issues are 
driving the expected increase: 
cost-cutting through more 
business automation, compli- 
ance with new risk manage- 
ment and corporate gover- 
nance regulations, the need to 
find additional revenue 
sources, and a push to better 
integrate back-office systems. 

“You can’t do effective cost- 
cutting or effective customer 
relationship management or 
risk management unless you 
have a systems landscape that 
is well integrated,” Kidder 


said. @ 44782 
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Microsoft Patches 
Windows Flaws . . . 


Microsoft Corp. posted software 
patches in an effort to fix three 
Windows security vulnerabilities, 
including a flaw in the Abstract 
Syntax Notation One library that 
attackers could use to take con- 
trol of systems. The company, 
which gave that flaw a “critical” 
severity rating, was first notified 
of the problem last July. A Micro- 
soft official said it took so long to 
produce the patch because of the 
need to “look at the broadest pos- 
sible implications” of the flaw. 


. .. And Undoes Part 
Of Browser Revamp 


Microsoft also issued a patch that 
restores Internet Explorer’s ability 
to handle some URLs containing 
user names and passwords. It had 
blocked the browser from process- 
ing such URLs earlier this month 
in a bid to stop e-mail phishing 
scams. But some developers re- 
ported that legitimate remote- 


access applications stopped work- | 


ing. Microsoft said URLs that use 
the @ symbol will still be blocked. 


PalmSource Pushes 
Two Versions of OS 


PalmSource Inc. introduced a 
rewritten operating system for 
handhelds but said it will continue 
to upgrade its current software. 
Most of the Sunnyvale, Calif.- 
based company’s development 
will focus on the new Paim OS 
Cobalt release, which is more 
compatible with Windows and of- 
fers improved multitasking. Work 
on the existing Palm OS 5, now 
called Garnet, will focus on wire- 
less and phone functions. 


Short Takes 


HEWLETT-PACKARD CO. said it will 
report first-quarter financial re- 
sults at the high end of its projec- 
tions, with revenue of about $19.5 
billion for the period that ended 
Jan. 31... . SILICON GRAPHICS 
INC. said it’s negotiating the sale 
of its graphics software unit. 


| 





Vendors Aid Convergence 
Of Networking, Security 


Juniper to acquire NetScreen; Cisco, 
IBM expand security partnership 





BY JAIKUMAR VIJAYAN 


AND MATT HAMBLEN 
WO SEPARATE ven- 
dor announcements 
last week highlight- 
ed a growing trend 

toward the integration of core 


| network technologies with se- 


curity and policy management 
features. 

One was an expanded part- 
nership between industry 
heavyweights IBM and Cisco 
Systems Inc. The companies 
are collaborating on product 
integration in a move de- 
signed to simplify tasks such 
as user provisioning, client se- 
curity management and secu- 
rity policy compliance. 

The other announcement 
was Juniper Networks Inc.’s 


| proposed purchase of Net- 


Screen Technologies Inc. in a 
stock-for-stock deal valued at 
about $4 billion. If the deal 
goes through as expected, Ju- 
niper will start bundling 
NetScreen’s network and ap- 
plication security products 
with its own network gear. 

The moves highlight vendor 
efforts to address the growing 
complexity companies face in 
managing the multiple, dis- 
parate network and security 
elements needed to protect 
their businesses, said Eric 
Ogren, an analyst at The Yan- 
kee Group in Boston. 

“The common theme here is 
that security is moving into 
the network and is becoming a 
network service,” Ogren said. 
“IT in the extended enterprise 
can no longer control the con- 
figuration of the endpoints 
connecting to their networks.” 

Aside from allowing for 
quick integration of basic se- 
curity measures into net- 
works, the convergence pro- 
vides for one-stop shopping, 
said Bruce Azuma, corporate 
director of IT at Wilbert Inc., 
a Broadview, Ill.-based compa- 





ny in the funeral services and 
industrial plastics businesses. 
“Vendors need to be thinking 
of ways to embed security into 
the network infrastructure,” 
Azuma said. 

The partnership between 
Cisco and IBM is designed to 
address such integration is- 
sues on several fronts. For ex- 
ample, Cisco’s Secure Access 
Control Server has been tied 
more closely to IBM’s Tivoli 
Identity Manager software. 
Network administrators will 
now be able to use identity in- 
formation contained in the 
Tivoli product to also control 
and provision network access. 

Similarly, IBM will embed 
Cisco’s virtual private network 
(VPN) client and Security 





| Agent software in all of its 


ThinkPad notebooks in a bid 
to provide more robust user 
authentication and remote ac- 
cess control. 

Meanwhile, Juniper’s pro- 
posed purchase of NetScreen 
will allow the company to ex- 
tend the functionality of its of- 
ferings, said Richard Ptak, an 
analyst at Ptak, Noel & Associ- 
ates in Amherst, N.H. 

NetScreen sells a range of 
security products, including a 
deep-inspection application 
firewall and a VPN product. 
“This will allow Juniper to 
create a broad-based family of 
security functions to protect 
the network, applications and 
devices,” Ptak said. 

Unlike other major network- 
ing companies, Juniper sells 
exclusively to the service- 
provider market. Even so, the 
company’s move is similar to 





Cisco/IBM 
Collaboration 

8 Integrated user provisioning: 
Tying Cisco’s Secure Access 
Control Server to IBM's Tivoli 


= Integrated security: 
Embedding Cisco's VPN client 
and Security Agent software in 
IBM ThinkPad notebooks. 


policy 
ance: IBM is participating in 
Cisco's Network Admission 
Control program. 


those of several other vendors 
in the networking market, a 
movement led by Cisco. 
“Over the last three or four 
years, Cisco has successfully 
convinced enterprise cus- 
tomers that security has to go 
down to the packet level,” said 
Bill Lesieur, an analyst at 
Hampton, N.H.-based Tech- 
nology Business Research Inc. 
“Pretty much all the tele- 
com equipment makers will 
offer some kind of security 
product or service,” Lesieur 


said. @ 44769 


Combining Capabilities Has a Downside, Users Say 


As network equipment makers 
load security capabilities into 
their devices, the convergence 
could pose technology and man- 
agement challenges, some users 
and analysts said. 

“The only caveat that 
organizations using this 
mode! must consider 
is the need for redun- 
dancy, because . . . you 
have a single point of 
failure,” said David 
Roessler, director of in- 
formation systems at 
Quay Corp., an elec- 
tronics contractor in 
Eatontown, N.J. “It is 
essential to avoid this 
and make sure proper fail-over 
features are in place.” 

Philip Brody, chief technology 
officer of the Clark County 
School District in Las Vegas, 
said many router and switch 
makers are putting firewalls and 
VPNs directly into their devices. 
“If it works, that seems fine to 


BRODY: “We 
Clima Ula cee 
gee eS CL 
that limits our 
ability to have a 
mixed network.” 


help make things easier for us,” 
he said. “But the problem is 
there may be a tendency by ven- 


: dors to make their devices pro- 


prietary. And we don't want pro- 
prietary stuff that limits 
our ability to have a 
mixed network with 
best-of-breed devices 
from different vendors.” 

Moreover, adding 
too many functions to a 
device could prove dif- 
ficult to manage, said 
Jeff McConocha, presi- 
dent of NCS DataCom 
Inc., an integrator of 
network gear and secu- 
rity products in Cleve- 
land. “If we ask one piece of 
equipment to do too many jobs, 
our customers can’t manage 
them very well,” he said. “These 
are complex technologies. We 
could even compromise security 
by oversimplifying the setup of 
the device.” 

On the positive side, combin- 


- ing network hardware with secu- 


rity software makes manage- 


: ment much easier, Roessler 

: said. It also reduces deployment 

: time, training overhead and the 

: physical size of the network, he 

> said, and allows for central man- 
* agement of security and network 
= problems. 


But with security functions 


: being integrated into the net- 

: working layer, companies will 

- still need two separate inter- 

: faces to give control to both se- 
: curity and network managers, 

: advised Mark Fabbi, an analyst 

: at Gartner Inc. Security and net- 
> works are “two [management] 

: groups and two responsibilities,” 
: he said. “It’s a pretty big issue, 

: since the security guy doesn't 

= want the networking guy to play 
: around with the security set- 

: tings, or vice versa. You need 

: someone responsible for securi- 
: ty policy and can't have the net- 
: working person muck with that.” 


- Matt Hamblen 
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__A Java Tools Face-off 


n't join the independent Eclipse group spun off by IBM. Here, « 


LEE NACKMAN 


Vice president of 


desktop develop- 
ment tools and CTO, 
IBM's Rational 
Software division 


Does the newly independent Eclipse Foun- 
dation represent the way IBM thought Sun 
should have handled Java? Certainly IBM 
would like to see a more open Java process 
than there is. | think Eclipse is breaking new 
ground as a governance model because we 


the vendor communities really working togeth- 
er, and all the signs are that it’s a good model. 


Do you think it would be a better world for 
your customers if the NetBeans open- 
source framework from Sun or the tools 
frameworks from Borland or Oracle no 
longer existed? | think it would be a better 
world if there was a common tools platform 
that all the vendors built on top of, and we 
competed in delivering the new kind of func- 


NEWS 


ty; Sun didi 
ir differing posit 


mmuni 


TIONS C on 


tionality that customers need rather than com- 
peting on delivering the old stuff that exists in 
the platforms. Customers want us to make ap- 
plication development simple. They want easier 
testing, all that sort of stuff. And if what we do is 
compete against each other by rebuilding the 
low-level infrastructure over and over again, 


| we're not delivering that kind of customer value. 


Why did IBM create the Standard Widget 


| Toolkit (SWT) to build graphical user in- 

| terfaces? We didn't do it because we thought 
| it would be fun to fracture Java or any kind of 

| provocative words like that. We did it because 
| we felt that we needed to have our application 
have the open-source community, and we have | 
| Microsoft can do with Windows. .. . 
| Swing has progressed in the last several years 
| and it's gotten better. But it still does not have 
| the same kind of native look and feel on every- 


development tools be competitive with what 
| think 


thing perfectly done using the native widgets. 


| That was achieved with SWT. 


| Why didn’t IBM submit the SWT to the 
Java Community Process (JCP) that Sun 
| established to evolve Java? Why don't you 
| have a conversation with somebody 


SIMON PHIPPS | 


| Java. What do you think? It's somewhat 

| naive, because the Java community is so di- 

| verse that trying to create one framework that 

| serves everyone is a lost cause. Now in both 

| NetBeans and Eclipse we have two very strong 


Sun objected to joining Eclipse on the 
grounds that it would be required to tran- 
sition to Eclipse. IBM claims there’s no 
such requirement. | can’t discuss what the 
negotiations were between IBM and Sun be- 
fore Eclipse was independent, because they're 
covered by commercial confidence. But what | 
can say is that the result of those negotiations 
led Sun to believe that it was not in its business 
interests to join Eclipse on the terms that were 
discussed, and now that Eclipse is apparently 
an independent organization, maybe that will 
change. Sun has no hostility towards Eclipse. It 
also has no intention of producing an Eclipse- 
based product. So it makes no more sense for 


us to join Eclipse than it makes for IBM to join in 


with NetBeans. IBM apparently has no plans to 
make a NetBeans-based product. No one is 
criticizing them for not joining in. 


IBM says a common tools platform 
would be a good thing for customers of 


frameworks that are supported by strong corpo- 


| rations who are using [their respective frame- 
| works] for their tools. And there is a richness 


there that people can be involved with. 


| Do you think that IBM should have turned 
| over SWT to the JCP? | can't 

| comment on IBM's actions... . . | 

| observe that the Java community 

| succeeded by cooperating on 

| standards and competing on im- 

| plementation and that the way 

| forward for both NetBeans and 

| Eclipse is to cooperate on stan- 

| dards and compete on implemen- 
| tation. And insofar as NetBeans or 


Eclipse are creating things that are 
going to be part of the Java plat- 
form standard, they should be 
working through the JCP... . 
There were good things and bad 


| from Sun and ask them questions 


| having SWT come into the JSR 





SIMON PHIPPS 


about how interested they were in 


[Java Specification Request] 
process? .. . There’s a lot of, how 


| shall! say, noise about splintering 


Java and all of this kind of stuff. 
take from the technology to deliver built 
the kinds of things that a customer 
wants, and | just wasn't really very 
interested in getting involved in a lot of non- 
sense about that. So | think that to the extent 
that the community feels that SWT could be an 
important part of the Java platform, we ought 


| to move ahead with pulling SWT into the JSR 


process. 


Why doesn’t IBM submit SWT now? We 

have talked about submitting it to the JCP. We 
would like to see it done like the JCP has done 
with Apache, where you have a JSR that basi- 


| cally references what the open-source commu- 
nity does. I'm not opposed to that. 


| Is there room for both SWT and Sun’s 


Swing graphical interface tool kit? 


things that happened in the past, and 


| there's no point in rubbing salt into old wounds. | 


We are where we are today. 


All of you have a vested interest in Java 
succeeding. And when you have SWT and 


| Swing and your customers need interoper- 
| ability, isn’t that a concern? The general 
| principle of Java is to isolate the application 


from the issues of the underlying platform, and 
consequently, | personally am not very excited 
when | see approaches being taken that make it 


! compulsory with regard for the underlying plat- 


form. | think that it flies in the face 
h Net of one of the basic principles of 

Java that | had spoken about 
when | worked for IBM and that | 
talk about now that | work for Sun. 

Now sometimes you have to do 
these things as a matter of expe- 
dience. But it shouldn't be allowed 
to stay that way in Java. There's 
been a lot of comment about the 
use of Swing within Eclipse, and it 
reflects the fact that there's only 
so far you can go with a platform- 
specific approach. It's a whole lot 
of work if you have to rewrite all 


| We were interested in what doesit thatali the 
yn top of 


LEE NACKMAN 





| abstract interface. . . . 
| mented before that when he was working on 
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| absolutely think there’s room 
for both. There are some capabil- 
ities in Swing that SWT doesn’t 
have. There are some capabili- 
ties in SWT in terms of its perfor- 

storm Mance and size and so forth that 
> Pid Swing doesn't have. And | don't 
VENCOFS see any reason that you have to 
tell people, “Thou shalt use one 
and only one.” 


What’s your stance on the Java Tools 
Community that Sun, Oracle and BEA 
formed? The JTC talks about improving tool- 


| ability of J2EE, and | think that’s a really good 


goal... . The questions | have about the JTC 
are: Why do we need a JTC as a separate advi- 


| sory organization to the JCP process? Why is 


it that the JCP process can’t admit that kind of 


| influence from the tools vendors that's needed 
| in the evolution of the Java platform? 


| would like to see JCP people [be] more ef- 
fective, rather than forming yet another organi- 
zation, yet another set of interactions between 
various companies and so forth. Let's make the 
JCP work effectively in pushing toolability 
ahead 


your code every time you decide you want to use 
a different operating system variant. 


| Do you think there’s a place for SWT to be 


incorporated into Swing? Probably not, be- 
cause the point of Swing is that Swing is an 
James Gosling has com- 


[the Abstract Window Toolkit], he looked at the 
approach that SWT takes and he decided not 
to use that approach. 


IBM created something and turned it over 
to a more independent organization with a 


| non-IBM executive director. Couldn’t Sun 


have done something similar and found a 
trusted entity to protect what it created 
and be more open? Possibly. But it isn’t a pri- 
ority, because it isn’t a problem with the Java 
community. The only company in the Java 
Community Process that ever comments about 
itis IBM. And they only ever comment about it 
to people like you. @ 44775 
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New ‘Tools Help Users 
Manage Security Events 


BY JAIKUMAR VIJAYAN 
HE TORRENT of data 
generated by the 
myriad security de- 
vices needed to pro- 

tect enterprise networks is 

creating demand for security 
event management software 
capable of mining the data for 
meaningful information. 

Two of the better-known 
vendors in this market are re- 
leasing upgrades to their prod- 
ucts to provide enhanced re- 
sponse and graphical analysis 
functions. 

One is Edison, NJ.-based 
NetForensics Inc., which next 
week will announce Version 
3.1.1 of its namesake security 
information management soft- 


Continued from page I 
Hospital IT 


one as part of an overhaul of 
its entire campus to meet the 
law’s requirements. The new 
data center is due to be fully 
operational by March 2005. 

In addition, the data center 
reconstruction prompted a 
server consolidation and up- 
grade project, Zielanzinski 
said. El Camino Hospital is 
consolidating more than 150 
smaller servers onto two 
Unisys Corp. ES 7000 systems, 
each of which can support 
up to 32 Intel processors. A 
matching set of servers is be- 
ing installed at a new disaster 
recovery site 120 miles away, 
in more geologically stable 
Sacramento, he added. 

The law, known as the Cali- 
fornia Facilities Seismic Safety 
Act, was passed in 1994 after 
the Northridge earthquake 
struck north of Los Angeles 
and caused $3 billion in dam- 
age to 23 hospitals. But the 
measure is just now becoming 
an urgent matter for many 
health care companies, which 
must comply by 2008 — or 
2013 if extensions are granted. 

The California HealthCare 





ware. A key enhancement is 
an automated response capa- 


| bility that prescribes specific 


actions administrators can 
take in response to security in- 
cidents, said Nitin Ved, presi- 
dent of NetForensics. 

Beyond merely alerting ad- 
ministrators to potential prob- 
lems, the new software walks 
them through a remedial pro- 
cedure based on the SANS In- 
stitute’s Six-Step Incident Re- 
sponse process, Ved said. An- 
other key addition is a user- 
based visualization capability 
designed to simplify the man- 
ner in which data is presented 
to business users, security an- 
alysts, auditors and network 
administrators, he said. 


Association estimates that it 
will cost $24 billion to earth- 
quake-proof or rebuild a total 
of about 2,700 hospital build- 
ings throughout the state. 

IT costs could account for 
$2.4 billion to $3.6 billion of 
that, said Gerard Nussbaum, a 
consultant at Kurt Salmon As- 
sociates Inc. in Atlanta. 

The staggering costs played 
a big role in convincing Sacra- 
mento-based Tenet Health- 
care Corp. to seek buyers for 
19 of its 36 California hospi- 
tals. Tenet last month said it 
would cost $1.6 billion to bring 
the facilities being divested 
into compliance with the 
state’s seismic standards. 

But for all the expenses it’s 
generating, the earthquake law 
gives health care firms an op- 
portunity to upgrade their IT 
systems, says Nussbaum and 
CIOs such as Sutter Health’s 
Hummel. It provides an impe- 
tus for hospitals to develop IT 
installations that are “truly 
21st century,” Nussbaum said. 

Sutter Health has already re- 
placed five of its 26 hospitals 
and needs to completely re- 
build six more. Hummel said 
the company is looking to take 
full advantage of the situation 
on the IT side. For example, 





Such enhancements add fur- 
ther value to the alerting capa- 
bilities that are already en- 
abled by the software, said Jim 
Patterson, a systems analyst 
for the state of Illinois in 
Springfield. The government 
office has been using Net- 
Forensics for several years to 
collect and correlate informa- 
tion from its firewalls, intru- 
sion-detection systems and 
antivirus products. 

Sunnyvale, Calif.-based Arc- 
Sight Inc., meanwhile, is re- 
leasing Version 3.0 of its secu- 
rity event management soft- 
ware this week. A key feature 
of the upgrade is a new archiv- 
ing and retrieval function de- 
signed to reduce the cost of 


his plan calls for storage ca- 
pacity to grow at a rate of 12TB 
to ISTB per year to support 
digital imaging and other data- 
intensive medical systems. 
Sutter also plans to run 
fiber-optic circuits to every 
floor of the new hospitals to 
support the exchange of digi- 
tal images, as well as new sys- 
tems such as electronic med- 
ical records and computerized 


| physician order entry. In addi- 


tion, it’s building in wireless 
systems to provide doctors 
and nurses with access to data 


IT managers at California hospi- 
tals are scrambling to continue 
supporting end users while med- 
ical facilities are being rebuilt to 
meet the requirements of the 
earthquake-protection law. 

Some hospital ClOs said their 
staffs find themselves reconfig- 
uring systems on the fly as med- 
ical departments move to tem- 
porary spaces because of reno- 
vations or new construction. 

For example, Robert Blades, 
CIO at Adventist Health Sci- 
ences Center in Loma Linda, 
said his IT department must 





| storing and managing security 


event data, said Hugh Nje- 
manze, chief technology offi- 
cer at ArcSight. 

ArcSight 3.0 modifies the 
manner in which security 
event data is stored in data- 
bases and uses new compres- 
sion technology, allowing 
users to store five times as 
much data in the same amount 
of space used previously, Nje- 
manze said. A new analyst col- 
laboration function lets secu- 
rity administrators from mul- 
tiple locations collaborate 
on the same data to evaluate 
threats and responses, he said. 

Despite the value such man- 
agement software can deliver, 
vendors have a long way to go 
when it comes to linking secu- 
rity event data to business im- 
pact, said Jim Hurley, an ana- 
lyst at Aberdeen Group Inc. in 
Boston. “How do you know if 
a security event is really worth 
bothering [with] without first 


from anywhere inside a hospi- 
tal, Hummel said. 

Joy Grosser, CIO at the Uni- 
versity of California, Irvine, 
Medical Center, agreed that 
the earthquake law is creating 
opportunities to plan from 
scratch IT infrastructures de- 
signed to support new sys- 
tems. Grosser said that in her 
case, that includes deploying 
new wireless networks to ac- 
commodate devices such as 
tablet PCs as well as broad- 
band networks to support the 
increasingly high-tech systems 


continually adjust the hospital's 
network and all of its desktop 
devices. The work has to be per- 
formed in a way that lets the 
hospital care for patients without 
interruption as it becomes com- 
pliant with the seismic mandate. 
“We want to minimize the im- 
pact to our patients and also not 
break any of our internal proc- 
esses while we are going 
through this,” Blades said. 
John Hummel, CIO at Sutter 
Health in Sacramento, said the 
planning process there includes 
keeping a sharp focus on physi- 
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knowing how material it is to 
the company’s business proc- 
esses?” Hurley said. Event 
management software won’t 
reach its full potential until 
this sort of decision-making is 
enabled, he said. @ 44765 


in operating rooms. 

The mandate has required 
extensive retrofitting and up- 
grading of the technology in- 
frastructure at White Memori- 
al Medical Center in Los An- 
geles, said Brian Smolskis, the 
facility’s IT director. His staff 
is installing new fiber-optic 
cabling, backup power sup- 
plies and fire-suppression sys- 
tems in the hospital’s data cen- 
ter and rebracing its server 
racks, Smolskis said, adding 
that none of the changes is a 
simple task. @ 44778 


acing Seismic Change, IT Pros Try to Meet Current Needs 
: cal building plans - something 


Hummel realized he had to do 


: after he looked at an architectur- 
: al drawing and didn’t see any 


provisions for wiring closets on 
patient floors. The architect ex- 
plained that he thought Sutter 


: would use wireless systems to 
: deliver applications to doctors 
: and nurses. But Hummel coun- 
> tered that wireless technologies 
> couldn't handle new digital- 


imaging systems, making wiring 


closets a necessity. 


~Bob Brewin and 
Patrick Thibodeau 
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MARYFRAN JOHNSON 


Oracle’s Checkmate? 


N THE HIGH-STAKES chess game of Oracle 

vs. PeopleSoft, federal antitrust lawyers put 

Larry Ellison in check last week — just two 

days after the database king raised his take- 

over bid to $26 a share in what is now a $9.4 
billion offer. What started last June as a $5.1 billion 
acquisition gamble has nearly doubled for Oracle, 
with the database maker looking increasingly deter- 
mined (or desperate) to buy its way into PeopleSoft’s 
No. 2 spot in the business applications market. 


The final call on 
whether Uncle Sam will 
file suit to block Oracle’s 
acquisition plans will be 
made by DOJ Assistant 
Attorney General Hewitt 
Pate early next month. 

But the preliminary staff 
recommendation against 

the merger signals a sig- 

nificant setback to Ora- 

cle. Another obstacle may 

arise in March when the 

European Union’s anti- 

trust regulatory body also weighs in. 

If you have a taste for irony, Elli- 
son’s predicament is a gourmet treat. 
After years of urging and supporting 
DOJ actions against Microsoft, he’s 
likely to end up competitively hob- 
bled by the same agency — all while 
struggling to position his company 
for future battles with the convicted 
monopolist. If the PeopleSoft acqui- 
sition founders, Oracle’s chances of 
taking on market leader SAP in the 
$20 billion enterprise application 
space will founder as well. 

“Oracle is slowly, slowly losing 
ground against its competition, both 
in mind share and market share, and 
it doesn’t appear that the tide has 
turned,” said B2B Analysts’ David 
Dobrin [“Oracle Changes Strategy, 
Embraces App Integration,” Quick- 
Link 44431]. 

Many enterprise users lost interest 
in the takeover drama months ago. 
But in a gratifying turn of events, 
customers didn’t end up as pawns 
sacrificed and kicked off the board. 





Both vendors have been 
competing harder than 
ever to keep you content. 
A case in point: Oracle 
has suddenly seen the 
light about providing a 
more open application- 
integration strategy, with 
tools coming later this 
year to help IT managers 
tie eBusiness Suite Ili 
software into other sys- 
tems. And at the Oracle 
AppsWorld Conference 
last month, Ellison was pitching the 
importance of software vendors pro- 
viding customers with clear, pre- 
dictable costs of ownership [“Oracle 
Promises to Deliver Exact Cost of 


| Ownership,” QuickLink 35834]. 


Of course, it could be a coincidence 





that these user-friendly changes are 
popping up now. But I suspect not. 
For PeopleSoft users, the initial 
angst about the takeover attack has 
been eased by the combatively pro- 
tective stance taken by CEO Craig 
Conway. He moved swiftly to set up 


| arebate program so sales wouldn’t 


stall, effectively guaranteeing cus- 
tomers refunds on their software 
purchases should Oracle prevail. 
PeopleSoft also wrapped up its 
merger with J.D. Edwards with re- 
markable speed. The only stumble in 
that friendly acquisition has been 
some public bickering with Quest, 
the J.D. Edwards user group [“Peo- 
pleSoft at Odds With J.D. Edwards 
User Group,” QuickLink 43921]. 

A onetime Oracle exec himself, 
Conway learned from the master 
how to spin a story. He’s been telling 
customers since last fall that the 
takeover deal is a dead issue, al- 


| ° . ~ 
though that is clearly more wishful 


thinking on his part than reality. 

With the forces of antitrust regula- 
tors gathering against him, Ellison 
now has to convince his own board 
to engage in yet another protracted 
legal battle. But whoever ends up in 
checkmate here — and I think it’ll be 
Oracle — what really matters is how 
hard both vendors keep working at 
keeping you happy. @ 44736 
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ERPs a Snap 
With an ASP 


MALL COMPANIES are 

finding that the technol- 

ogy available through 
ASPs can help them apply 
ERP techniques to their oper- 
ations. By tapping application service 
providers for processes such as online 
invoicing and the tracking of sales, 
production and inventory, businesses 
are strengthening their links to cus- 
tomers, vendors and business partners. 

At China Manufacturing Network 
LLC in Irvine, Calif., CEO Everette 
Phillips uses ASP technology to fulfill 
orders between U.S. customers and 
nearly 100 family-owned factories in 
China. 

Phillips’ precision-manufacturing 
division fills orders for machined 
parts, with his firm acting on behalf of 
Chinese factories that aren’t set up to 
deal directly with 
U.S. customers. His 
company also serves 
as a buffer for U.S. 
businesses unskilled 
in the nuances of 
working with Chi- 
nese factories. 

“We’re like a gen- 
eral contractor,” says 
Phillips. “When a 
purchase order 
comes in froma U.S. 
company as a PDF, 
we assume the responsibility for get- 
ting the product made and shipped.” 

That might sound easy, but it in- 
volves many steps, all of which are 
handled with online CRM and ERP 
services from San Mateo, Calif.-based 
NetSuite Inc. 

The overall effect is a supply chain 
management operation linked to a sales 
and accounting system in which blue- 
prints for die-cast parts are sent to 
Irvine, consolidated with similar orders 
and then e-mailed to China. Once a 
price has been quoted and accepted, an 
order for a small number of sample 
products is sent to China. The first run 
is made and delivered to the U.S. cus- 
tomer for approval. Whether the goods 
are cable assemblies or aluminum 
products, NetSuite makes it possible for 
Phillips to enter an item number corre- 
sponding to the U.S. company’s internal 
inventory. Then the U.S. customer can 
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Information Management 
Is No Longer a Luxury; 
It’s a Boardroom Issue 


WHAT’S THE VALUE OF CORPORATE 
INFORMATION? It depends on the 
lens through which it’s viewed. 
Consider, for example, the medical 
records of a child in New York. To his 
parents, the records are a vital history 
of their health. To Daniel 
Morreale, CIO of the North Bronx 
Network, 


also offer the opportunity to glean 


child’s 


Healthcare those records 


valuable insights on healthcare 
trends. And to the federal and state 
governments, they represent a regula 
tory obligation to retain that data for 
up to 28 years. 

As the role of information grows 
more critical with each passing year, so 
do the challenges that come with man- 
aging it well. Nowhere does smart 
management come into play more 
than when it comes to complying with 
the thousands of regulations that man- 
date how companies worldwide store 


and manage their data. 


“We all know that information can 
be one of the most valuable corporate 
assets out there,” says Peter Gerr, an 
analyst at Enterprise Storage Group, a 
Hopkinton, 


research company in 


Mass. “But compliance plays a huge 
role. To me, compliance is really one of 
the driv ing forces behind what I see as 
an evolution in how we manage and 
think about information.” 

Many companies have long wres- 
tled with the issues of internal infor- 
mation management, but now they 
must also grapple with the dictates of 
corporate governance and new regula 
tions such as Sarbanes-Oxley and the 
Health Insurance Portability and 
Accountability Act (HIPAA). While it 
might be tempting to think of compli- 
ince as affecting but a few industries, 
such as healthcare or financial servic 
es, the truth is that compliance touch 
es almost any organization that col 


lects and manages data. 





EMC INFORMATION LIFECYCLE MANAGEMENT STRATEGIES: Advertising Supplement 


4 





« REGULATORY COMPLIANCE MANDATES 
¢ APPLICATIONS ARE INCREASINGLY INTERDEPENDENT 


¢ NOT ALL DATA IS CREATED EQUAL 
¢ ONLINE ACCESS 





Consider Sarbanes-Oxley, which regu- 
lates the way public companies manage 
their financial information. According to 
Gerr, the whistle-blower part of that legis- 
lation also applies to private companies. 
Any private company with the thought of 
going public must be in compliance with 
Sarbanes-Oxley as well, adds Roy Sanford, 


a vice president of markets and alliances at 


EMC Corp., the storage solutions provider 


“To me, based in Hopkinton, Mass. 


. “There are more than 15,000 regula 
compliance 
tions alone in the U.S at the federal, state 


is really one and local levels, and about 20,000 regula- 
of the driving tions around the world that govern the use 
forces of information,” Sanford says. “They 


. touch about any organization you can 
behind what a aes 
think of—public, private, nonprofit, all are 


| see as an affected by regulations outside of the con- 
evolution in trol of the organization.” 

how we Many companies have instituted inter- 
manage and nal information governance methods that 

£ must also be met as part of a new focus on 
think about corporate governance overall. 
information.” Phe issue of regulatory compliance chal- 
lenges the traditional IT approach of storing 
every bit of data, because it requires a look 
at information across its entire lifecycle and 
atfects everything from retention periods to 
deletion policy to data authenticity. 

“We feel that compliance will have a 
huge material effect not only on how com- 
panies manage information, but also on 
how they think about the value and risk 
that information holds,” says Gerr. 


THE IMPACT OF COMPLIANCE 

Business risk, the fear of regulatory viola- 
tions and potential fines all speak to the 
need for compliance. “In many cases, the 


regulations are new and companies just 





don’t have the capabilities in place to meet 
them,” says Mark Lewis, chief technology 
officer at EMC. “Many fail to have a cen 
tralized information structure that allows 
for the implementation of information 
management policies in the first place.” 

Bottom line: It’s a whole new world out 
there for companies that rely on information, 
particularly as it transforms to “all digital.” 
For many organizations, that means there’s 
no “hard copy” to back up some informa 
tion—email comes to mind—making com 
pliance and authenticity even more difficult. 

“We’re almost all electronic,” says 
Morreale of the North Bronx Healthcare 
Network. “It’s part of the problem 
because we can’t touch the data that’s 
been stored in the clinical information 
system—can’t touch, can’t delete or 
purge.” At the same time, Morreale rec 
ognizes that some of that data has out 
lived its regulatory value. He needs a tool 
that will let him discard the outdated data 
while keeping the rest. 

Informational compliance is as much 
about smart content and resource manage 
ment as it is about regulatory compliance. 
ClOs must figure out how to apportion [1 
resources tO Manage an ever-growing pool 
of information, some of which legally must 


be retained for years. The effect of accumu 


GROWTH IN STORAGE CAPACITY 
FOR COMPLIANT RECORDS 


The need to meet compliance requirements will 
continue to grow, requiring methodologies and 
technologies to understand the value of infor- 
mation and how to manage it accordingly. 





Contracts 

Check images 
Document images 
Email & attachments 
Legal documents 
Audio conference 
Backups 

Biometric data 
Blueprints 

Books 
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CT scans 

Clinical trial results 
Digital evidence 
Genomic data 
Government records 
Historical documents 
Insurance photos 
Letters 

Manuals 

Monthly reports 
MRis 

News clips 


Newspapers 
Periodicals 
Proteomic data 
Seismic data 
Spreadsheets 
Training materials 
Transcripts 

Video conferences 
Videos 

White papers 
X-rays 


lating information for decades has a pro- 
found impact on how to classify, where to 
keep and how to recover it. 

Like many ClOs, Morreale has discov- 
ered that managing information for compli- 
ance purposes is not a “store it and forget it” 
exercise. The value and risk of corporate 
information have driven him to explore a 
holistic process known as Information 
Lifecycle Management. 

As detailed in earlier editions of this 
series, Information Lifecycle Management 
is not a product but a method of harnessing 
informational chaos. 

There are a number of issues that make 
a lifecycle approach to regulatory compli 
ance attractive: 

* Regulatory compliance mandates that 
data authenticity and integrity be irre 
proachable. “Data integrity is key,” says 
Gerr. “Data must be retained in its original 
format.” Many regulations, such as 
HIPAA, require that the data be kept safe- 
ly, too, making information security an 
important part of the equation. 

¢ Applications are increasingly interde- 
pendent, pulling data sets from neighboring 
systems. As these interrelationships broad- 
en, compliance at the application level 
becomes insufficient, making an enter- 
prisewide ILM process necessary. 

¢ Not all information is created equal. With 
the new regulatory environment, companies 
must protect the right data longer and recov- 


er it faster, and know when to delete it. 


LINKING ILM AND COMPLIANCE 

For many companies, Information Lifecycle 

Management offers the best means to man- 

age regulatory compliance issues. Here’s why: 

° Flexibility—Information Lifecycle Man- 
agement lets companies flexibly store 
information and move it around as regu- 
latory needs demand. Take, for exam- 
ple, an audit at a financial services firm 
that seeks details about a particular 
trade—information that’s stored as email. 
IT departments must be able to access 
that information quickly and relatively 
easily, and store it with an eye to the flex 
ible nature of its value. 
Indexed Information—ILM ensures that 
companies know exactly what kind of 
information they have and where it is, 
making it simple to keep the right data 
for the right period of time. For compa- 
nies that deal with a myriad of varying 
regulations, this is particularly valuable. 
“We need to keep information for a very 
long time, but we also need to know 
when to get rid of it because of legal man- 
dates,” says Morreale. “That’s the value 
of Information Lifecycle Management.” 
Classification—By conducting a data 
classification and prioritization study, 
companies can ensure that necessary 
information is placed in fixed content 
storage built specifically to ensure its 
authenticity. Many times that means 
calling in outside experts. “Information 


Lifecycle Management consultants are 


“We need 
to keep 
information 
for a very 
long time, 
but we also 
need to 
know when 
to get rid of 
it because 
of legal 
mandates. 
That’s the 
value of 
information 
Lifecycle 
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If you’ve got any burning 
questions about 
Information Lifecycle 
Management—and how 
you can begin 
implementing such a 
strategy—send them to 
iim_questions@emc.com. 
We'll answer the most 
frequently asked 
questions later in 
this series. 








part of the storage companies’ bench 
teams,” says Gerr. “They have the serv- 
ices and tools that will help an organi- 
zation classify and value their data, 
taking a step toward having a fully 
realized strategy.” 

Right Storage for the Right Information— 
Classifying information enables IS execu- 
tives to create tiered storage that matches 
the regulatory value of the data with the 
corresponding price/performance layer of 
storage. Again, fixed content storage is a 
frequent choice when it comes to ensur- 
ing corporate governance and regulatory 
compliance. 

Record Level Access—Information 
Lifecycle Management treats data at a 
very granular level, so ClOs get precise- 
ly the data they ask for when they need 
to access information for regulatory 
purposes. “Regulations are very specif- 
ic,” says Gerr. “[Regulators] look for 
compliant records, not volumes of 
records. A very fine-toothed comb needs 
to be in hand, and IT caretakers will be 
required to maintain a deep granulari- 
ty.” For companies facing compliance 
issues, getting at the information is vital, 
as is getting it in a timely fashion. They 
must be able to pull authentic data, and 
they must be able to get at it fast. “I’m 
really convinced that recovery time will 
eventually become part of compliance 
objectives,” he says. 

Retention and Protection—ILM means 
that applying automated policies will 
ensure that information is kept as long 
as it needs to be and is deleted after- 
ward. For example, an email archiving 
application will affix a piece of meta- 
data containing a required retention 
period to each email, and will auto- 
matically delete that email when 
appropriate. “Automated policies are 
like a handshake between the applica- 
tion and the infrastructure,” says 
Sanford. “It requires the infrastructure 
to be application aware, and that’s 
what happens with Information 
Lifecycle Management.” 
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¢ Flexibility 
° Indexed Information 
* Classification 


* Right Storage for the Right 
Information 


* Record Level Access 
* Retention and Protection 


In an era of increasingly strict regula- 
tions that govern how companies must 
manage and store information, it’s clear 
that CIOs must take action sooner rather 
than later. With the possibility of fines and 
other penalties for noncompliance, compa- 
nies cannot afford to wait. Instead, ClOs 
need to implement governance strategies 
that work across the entire enterprise and 
manage information holistically. 

“Part of a CIO’s job is talking about the 
strategic value of information and teasing 
out what’s real versus what’s not real,” says 
Morreale. “You need to understand that 
information is fluid and constantly adapt it 
to whatever regulatory changes happen, and 
for that you really need a big-picture target.” 

As such, companies must manage this 
task at a very high level and make sure 
that their compliance policies are driven 
by the value of the information first and 
foremost. For many, Information Lifecycle 
Management is the one answer that’s 
couched in terms of real business value. 


NEXT: In the next part of this series, 
we'll look at how Information Lifecycle 
Management enables new operational 
efficiencies. 


EMC FOR MORE INFORMATION 
where information lives Visit www.emc.com/ilm 

for an in-depth look at Information Lifecycle 

Management products, services and strategies 
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log onto a portal and check order status | 


using a single item number. 

Once the sample run is approved, a 
purchase order is generated and then 
sent to Phillips, who creates a sales or- 
der and another purchase order for the 
factory in China. 

Phillips aggregates orders using the 
“consolidate opportunities” feature of 
NetSuite, increasing his cost savings. 
He’s also able to create packing slips 
and receive payments. 

The amazing thing: This all takes 
place without an IT department. 

Phillips once worked with large SAP 
systems in which controllers and IT 
staffers spent time and money match- 
ing item master lists with vendor files. 
“IT used to have people doing this for 
me,” he says. “Now there’s one person 
to manage the T1 line for the building, 
with hosted e-mail and a Web site.” 

That leaves time to work with cus- 
tomers, offer competitive prices and 
manage independent sales reps. 


@ 44622 


THORNTON A. MAY 


Solve Alpha 
Problems 


S A FUTURIST oper- 

ating in the IT leader- 

ship area, I am often 
asked, What comes next? 
What are the IT leadership 
milestones on our Homeric quest to- 
ward respected acceptance by C-level 
executives? 

Two needs that must be immediate- 
ly addressed come to mind. 

The first is to dramatically improve 
our ability to identify the alpha prob- 
lems facing the enterprise, to mobilize 
resources and to then achieve traction 
on those problems. The second is to 
persuade vendors to redirect their 
massively wasteful marketing expendi- 
tures to programs that add value but 
are independent of product and ser- 
vice purchases. 


Alpha Problems 
In society and the sciences, the word 
alpha means “primary, the most im- 
portant.” We all know about alpha ex- 
ecutives, the ones at the top of the 
food chain. And we all know about 
alpha predators, the ones who eat us. 
In both cases, the wisest course might 
be to stay away. 

In IT, alpha means something else. 


It’s used to describe prod- 
uct releases that most users 
would be well advised to 
stay away from. And when 
it comes to alpha problems, 
the empirical evidence indi- 
cates that the majority of 
IT resources stay away 

from them. 

In their “Managing the 
Information Resource” pro- 
gram at UCLA, Moshe F. 
Rubinstein (who will speak 
at Computerworld’s Premier 
100 Conference in March) 
and Iris Firstenberg talk 
about the huge value associated with 
focusing on alpha problems — the 
problems that matter. Greatly improv- 
ing our willingness to make sure that 
the bulk of the IT investment is always 
applied to alpha problems is a critical 
step toward winning executive accep- 
tance of IT and an appreciation of the 
value we can create. 


Misspent Marketing Dollars 
How many of you need another ven- 
dor-logoed T-shirt? Another coffee 
cup? Another fabric briefcase or tote 


User/Vendor 
Dialogue Is Key 


READ THE JAN. 12 ARTICLE 
“PeopleSoft at Odds With J.D 
Edwards User Group” [QuickLink 


THORNTON A. MAY iS 2 
longtime industry ob- 
server, management 
consultant and com- 
mentator. Contact him 

at thorntonamay@acl.com. 


care of the customer, and 
ything will take care of itself.” 
To those considering user group 
nembership, | say, “Use the power 
any to help you grow profes- 
sionally and develop stronger rela- decision-m 





bag? Go to any trade show 
or conference and you will 
observe that the supply 
side of the IT value dance 
(that is, the vendors) 
spends a huge amount of 
money trying to get us to 
consider its products and 
services. And when they’re 
not giving away freebies at 
shows, vendors are spon- 
soring sporting events, golf 
outings and C-level feed- 
ings. (Is there some rule 
that says technology can’t 
be sold unless an exorbi- 
tantly priced and ludicrously large 
chunk of beef has been consumed at 
an upscale steakhouse?) 

Smart vendors are toning down 
their investments in such no-gain, lux- 
ury giveaways and time wasters and 
focusing instead on funding “shared 
spaces” that create knowledge and 
move the ball forward toward solving 
the alpha problems of customers and 


ee 


customers-to-be. 

Some of the smartest money being 
spent is going to these programs: 

@ The Center for Advancing Business 
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Through Information Technology at the W.P. 
Carey School of Business at Arizona 
State, which is adding huge value to In- 
tel and the U.S. Army Information Sys- 
tems Engineering Command via semi- 
nal work in the area of information 
management. 

@ The CIO Solutions Gallery at Ohio 
State’s Fisher College of Business, 
championed by Dean Joseph A. Alutto 
and Carol Newcomb, director of the 
college’s executive education program, 
which is setting a new standard of ex- 
cellence for time-compressed collabo- 
rative CIO problem-solving. 

@ The IT Leadership Academy at Florida 
Community College, run by Rob Ren- 
nie, which is identifying needs and 
then sculpting curricula to address the 
IT leadership crisis. 

Next time your vendor rep comes 
calling, ask him what shared spaces his 
company has created for solving alpha 
problems and how you can get in- 


volved. @ 44643 
WANT OUR OPINION? 
9 Noe cots and ins orci 


www.computerworld.com/columns 
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da, India, for $12,000 a month. This 
CIO needs to re-evaluate his spend- 
ing habits. | don’t object 

sourcing when it saves 


S money, Dut 
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ble in-house 
ng, IT spendin 


43921] and follow-up coverage 
from Jan. 15 and 17 with great inter- 
est. The public disclosure of the rift 
between J.D. Edwards user group 
Quest and PeopleSoft demon- 
strates just how delicate these rela- 
tionships can be. How a software 
vendor treats its user group tells 
you a great deal about its attitude 
toward its customers. It can be the 
difference between paying the cus- 


tomer lip service and creating a cul- 


ture that puts customer needs first 
Companies with satisfied user 
communities are often those with 
leaders, from the CEO on down, 
who are not only committed to but 
are enthusiastic about helping their 
customers succeed. | witnessed 
this firsthand in my interactions 
with the late Ken Sharma, co 
founder of i2 Technologies. Ken 
genuinely believed that the voice of 
the end user must be heard at all 
levels of the company, most no- 
tably at the top. He always put the 
user first and was known to say, 


tionships with vendors.” And to 
those companies with user groups, 
| say, “Keep the lines of communi- 


open, in good times and bad, 


re well on your way to hav- 
ng the respect and loyalty of your 
users today and into the future.” 
Gene Hunt 
2003 chairman, 


i2 User Group, Dallas 


SOT RENT REE EP OR 


Spend Wisely on IT 


EGWAY’S VOLUMES hardly dic- 


tate a need for Oracle [“Seg- 
way’s Tech Plans Look Down the 
Road to Growth,” QuickLink 


44266]. As a rule, stay with off-the- 


shelf accounting packages for as 
long as it makes sense. It's one 
thing to anticipate growth and 
something else to act upon that as- 
sumption by front-loading. And the 
company's CIO says a T1 line from 
Manchester, N.H., to Denver would 
cost $10,000 to $12,000 a month. 
| can get a Tl from San Jose to Noi- 


more likely to grow out of co 
under the outsourced IT model 
lan Chronister 

MIS manager, SiRF Tech- 
nology Inc., San Jose 


Don’t Neglect Value 
OTH Paul Strassmann and 
Ronald Coase make a funda 

mental error in their defense of IT 

outsourcing [Outsourcing the IT 

Infrastructure,” QuickLink 43847] 

By focusing entirely on the ¢ 

providing IT services, they c 

pletely overlook the most 

consideratt 

iT services do not merely con- 
sume resources; they also provide 
value to the activities of an enter- 
prise. | would argue that in most 
cases, the most value is provided 
by keeping IT activity as close as 
possible to the activities of the busi- 
ness. Outsourcing deprives the en- 
terprise of people whose knowl- 
edge, experience, skill, loyalty, in- 


1: value 
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There's a smarter alternative to adding more servers: adding servers that can do more. Like IBM eServer™ xSeries 
systems — powered by Intel® Xeon™ processors. Select models let you scale up (simply) from 1 to 16 way. Logical 
partitioning with optional VMware” software lets you deploy up to 80 virtual servers and handie not just one, but multiple 
applications at once! Easily. How can you thrive in the on demand world? With xSeries systems that can do more. So 
you can do less. For more info, download Why X, an in-depth guide to xSeries systems at ibm.com/eserver/advantage 


5 reasons more and more businesses are turning to IBM eServer xSeries systems 


Scale 1-16 way with select IBM Director systems Linux through Mainframe-inspired 
models. Pay as you grow. management. the e line. technologies 


IBM eServer xSeries systems are powered by 


(© ~ erver Intel Xeon processors. (You can get more when 


you buy less.) 





ROBUST OBJECTS 
AND ROBUST SQL 


TI 
DBMS PRODUCT 


For your next generation of applications, move 


to the next generation of database technology. 

Caché is the post-relational database that com- 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing 
and accessing objects. With Caché, no mapping 
is required between object and relational views of 
data. That means huge savings in both development 
and processing time. 

Applications built on Caché are massively scala 
ble and lightning-fast. Plus, they require minimal 
or no database administration. 

More than just a database system, Caché incor 
porates a powerful Web application development 


Lh t. 
i. 
Lit 


environment that dramatically reduces the time to 
build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at thousands of the world’s 
largest hospitals. Caché is so reliable, it’s the leading 
database in healthcare — and it powers enterprise appli- 
cations in financial services, government and many 
other sectors. 

We are InterSystems, a specialist in data manage- 
ment technology for twenty-five years. We provide 
24x7 support to four million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux and 
major UNIX platforms — and it is deployed on systems 
ranging from two to over 10,000 simultaneous users. 


InterSystems » 


CACHE 


Make Applications Faster 


Free White Paper 


Read or request a copy of the Baroudi/Bloor white paper “The Failure of Relational Database, 
he rise of Object Technology and the Need for the Hybrid Database.” at www.InterSystems.com/cworld 





retrieval 
realities 


E-mail archiving is suddenly a priority, with com- 
panies motivated by rising volume, regulatory pres- 
sures and the threat of litigation to set policies and 
find effective technology. BY LUCAS MEARIAN 


HEN HURRICANE ISABEL struck the East 

Coast last September, it flooded the first 

floor of Dan Roche’s Baltimore-based Web 

design company and threatened to leave 
him without access to e-mail. 

“We do everything through Exchange ... 
munications, sales. We do negotiations, and our 
whole corporate calendar is on there. You need that 
audit trail. I’d be devastated if something happened 
to my e-mail,” says Roche, CEO of E.magination Net- 
work LLC, which generates about 100,000 e-mails 
per week. 

Corporate executives understand that e-mail is no 


all com- 


longer just the means by which company picnics are 
announced — it’s the medium for much of their orga- 
nizations’ real business. They also know that govern- 
ment regulators see electronic communications as 
potential evidence that must be preserved. Yet e-mail 
archiving policies are often as arbitrary as requiring 
IT administrators to save everything on a server and 
then delete it after two years. 

In a recent poll of 1,018 companies of all sizes by 
Kahn Consulting Inc. in Marietta, Ga., 84% of re- 
spondents said they used e-mail for forward-looking 
business planning, but only 37% said they managed 
e-maii relative to its content. 


Not only is a delete-all e-mail policy bad for busi- 
ness, but regulatory agencies are also requiring many 
industries, such as financial services and health care, 
to spend IT dollars on e-mail archiving technologies 
that allow quick search-and-retrieval capabilities. 

“All those rules that told you to keep records whe: 
you were working in a paper world now apply to 
e-mail,” says Randolph A. Kahn, founder of Kahn 
Consulting, a firm that specializes in legal compli- 
ance, policy and risk management issues in IT. 


Compliance Hits Home 

The inability to search and retrieve e-mails in a time- 
ly fashion is what led the U.S. Securities and Ex- 
change Commission to fine five Wall Street broker- 
ages a total of $8.25 million in December 2002. The 
firms included Morgan Stanley, Goldman Sachs & 
Co. and Salomon Smith Barney Inc. 

The SEC, the New York Stock Exchange and the 
National Association of Securities 
brokerages to retain e-mail traffic. The brokerages 
that were fined failed to preserve the e-mails for 
three years and/or to preserve them in an accessible 
place for two years. 

The SEC’s shot across Wall Street’s bow was heard 
throughout the entire financial services industry. 

“We were getting hints from [the lega! depart- 
ment] that the SEC regs were going to apply to the 
banking side as well,” says Jeff Theiler, vice president 
of direct banking at Hancock Bank in Gulfport, Miss. 

In December, Theiler rolled out an internal e-mail 
archiving product for his Exchange server environ- 
ment from start-up ZipLip Inc. in Mountain View, 
Calif. Theiler says his Exchange servers could store 
e-mail but couldn’t keep up with the volume that a 
bank with 100 branches and 1,900 employees gener- 
ates. “One of the requirements was that a regulator 
needed to be able to come in and, without a whole 
bunch of extra codes and steps, sit down behind a ter- 
minal and point to a file and get to it,” Theiler says. 


Dealers all require 
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John Mancini, president of the Association for In- 
formation and Image Management in Silver Spring, 
Md., argues that even businesses not covered by one 
of the new regulatory standards should be looking at 
e-mail archiving to manage litigation exposure. 

But companies that want the ability to search and 
retrieve large numbers of e-mails are finding their 
old direct-connect server infrastructures lacking. 

EMC Corp., IBM and other storage vendors are 
pushing the idea of information life-cycle manage- 
ment (ILM), or the ability to capture unstructured 
data such as e-mails and manage it through a policy 
engine from cradle to grave. 

For example, retrieving e-mail from tape storage 
can be an arduous task that, depending on the in- 
formation’s age, can cost anywhere from thousands to 
millions of dollars. That leads some businesses to set- 
tle lawsuits out of court rather than foot the bill for 


discovery if it would require retrieving old e-mails, 
Mancini says. But keeping e-mail staged on online 
disk arrays for years instead of days can speed search- | 
and-recovery time from days or months to seconds. 
E-mail archival technologies generally include an 
appliance with journaling software that stores all in- 
coming and outgoing e-mails, an indexing tool and 
the ability to search by content, user or header. 
Another feature important to any e-mail archival 
technology is single-instance backup, according to 
Peter Gerr, an analyst at Enterprise Storage Group in 
Milford, Mass. It ensures that duplicate attachments, 
such as memory-hungry PowerPoint documents, are 
stored only once, which saves space. 


Buy or Outsource? 

Purchasing e-mail archiving hardware and software 
can cost millions of dollars, so E.magination Net- 
work’s Roche decided to outsource the company’s 
e-mail archiving system to Evergreen Assurance Inc. 
in Annapolis, Md. Evergreen uses a server on the 
customer’s site to mirror an exact duplicate of the 
e-mail environment, kept in a remote data center. 


® Automatically capture all incoming and outgoing 
ee oe UE CUE Russe oe aL) 
ployees, index their full text and archive them. 


® Identify each message and attachment individual- 
VANCE UE Re rl CM eect m CMT ithe 
ple users. 
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tomized lexicon of specific words, terms or phrases. 
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records based on policy to the appropriate storage 
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® Allow personal e-mail stores, such as Exchange 
or Outlook .pst files (personal folders), to be mi- 
grated to the archive store as needed. This helps by 
aU eR BURR O RM mE Tern lUl 
and management while still allowing them to search 
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_ TECHNOLOGY — 


| | Evergreen Assurance’s data center backs up all of 

| its incoming and outgoing customer e-mail mes- 
sages, as well as address books and contact lists. 
Evergreen guarantees e-mail recovery within 15 min- 
utes after a service outage. 

“T don’t think we could have built what Evergreen 
offered. They built up fairly sophisticated systems in 
terms of replication, the fail-over piece and recov- 
ery,” says Roche. “We had water come through the 
roof of our building but didn’t suffer any damage oth- 
er than power outages. It was nice that I had my 
e-mail on my BlackBerry that was chugging along.” 

In contrast, Hancock Bank’s Theiler says he chose 
to build an in-house archival system because he had 
concerns about complying with recent privacy legis- 
lation if he chose to outsource. 

“When considered alongside all the consolidations 
taking place among outsourced vendors and some 
of the security lapses (i.e., third-party credit card 
vendors who have servers mysteriously disappear 
from their data centers), we felt it was best to have 
an in-house solution — so control and security was 
definitely a consideration,” Theiler explained via an 
e-mail message. 

Theiler says that he wanted only the bare mini- 
mum level of technology needed to meet regulatory 
requirements for archiving e-mails, but he also want- 
ed the ability to expand features later in order to in- 
clude encrypted e-mail for sending bank statements 
to customers or implement remote Internet access to 
e-mail accounts for internal users. He says he also 
liked the price he got from ZipLip. Hancock Bank 
currently uses ZipLip’s Unified Archival software 
product, which starts at under $15,000 for 25 mail- 
boxes and supports Microsoft Exchange, Lotus 
Domino and other major e-mail and instant-messag- 
ing systems. ZipLip sells a gateway appliance that 
captures all the e-mails being generated 
on a server and transmits them using 
Secure Sockets Layer encryption to a 
storage-area network (SAN) or net- 
work-attached storage device, based on 
predetermined policies. 

The retention policy can be based on 
a domain, user or group of messages, 
and end users or systems administrators can deter- 
mine the length of time e-mails are archived prior to 
deletion. 


In-house With ILM 


OSF Healthcare System in Peoria, Ill., purchased an 
EMC Centera array for e-mail archiving as part of an 
80TB multitiered storage architecture. The e-mail 
portion of the SAN cost hundreds of thousands of 
dollars but will serve an infrastructure burdened by 
6 million e-mails a year, says Jim Doedtman, techni- 
cal planning manager at OSF. 

As part of a comprehensive IT infrastructure 
change-out that began two years ago, Doedtman says, 
he wanted an e-mail archiving system that could be 
indexed, eliminate duplicate copies of attachments 
and automatically manage e-mails and other docu- 
ments from creation to deletion for 7,000 users on a 
Windows 2000/Exchange environment. 

Doedtman is building an ILM system that will au- 
tomatically move e-mail from high-end EMC Sym- 
metrix arrays to midrange Clariion arrays to Centera 
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The Regulatory Pinch 


Governments are increasingly demanding transparency, 
security and accountability in organizations’ archival proc- 
esses. Here are a few of the laws and regulatory bodies that 
are driving e-mail archiving technologies: 


IN THE U.S ABROAD 


Sarbanes-Oxley  ™ Data Protection Act (regulates 

m= HIPAA ee eee data from 
the European Union) 

m eSignature Act 18 MoReq (EU requirements for 

@ SEC 17A managing electronic records) 

(on electronic 

Gini @ U.K. Metadata framework 


retention) ® Dublin Core/Document 
Management & Electronic 
' as a Archiving (government information 
standard management requirements) 
for records @ Canada’s Uniform Electronic 
management Evidence Act 


soplcatiene) a shine Evidence Act 
SOURCE: ASSOCIATION m The UK. Public R Office 


@ Document Management & 
Electronic Archiving (Germany) 


servers, based on age, origination and content. 

Doedtman has set a one-year e-mail retention poli- 
cy, and he says an internal service-level agreement 
requires e-mail restores within four hours. But if a 
full server restore is required, it can take up to 14 
hours using the current tape backup system. “We’re 
talking 30GB to 40GB worth of data per restore. And 
right now we have ITB online across 10 
Exchange servers,” he says. 

Last year, Doedtman evaluated Lega- 
to Systems Inc.’s EmailXtender but 
decided to purchase an e-mail archiv- 
ing product from KVS Inc. in Arling- 
ton, Texas. KVS’s flagship product, En- 
terprise Vault, offers policy-based 
archiving for Microsoft Corp.’s Exchange, SharePoint 
Portal Server, Office System 2003, instant messages 
and file servers. 

Doedtman plans to cap all users at 1OOMB of 
e-mail storage on Exchange servers. When users 
reach 90% of that limit, KVS’s software will move 
older e-mails to the SAN. He expects a 70% reduc- 
tion of storage currently on Symmetrix arrays and 
tape libraries, because e-mail will be stored on Cen- 
tera arrays, which will automatically replicate to du- 
plicate arrays in a disaster recovery site. 

Doedtman says he’s focusing on compliance with 
the Health Insurance Portability and Accountability 
Act, which will require health care providers and in- 
surers to protect patient information and ensure its 
availability even after a patient’s death. 

“We are going to be doing journaling of e-mails, 
and we purchased the e-mail discovery module from 
KVS that, in the hands of the legal team, gives insight 
into all Exchange information in a very easy way,” 
says Doedtman. “We positioned ourselves very well 
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3 SERVERS ARE ABOUT TO GO DOWN. 


ONE OF THEM WILL LOSE 200 
CUSTOMERS PER MINUTE. 


CAN YOUR SOFTWARE TELL YOU WHICH ONE? 


Business Service Management solutions from 
BMC Software® can. In fact, they let you predict 
critical performance problems and resolve them 
before they ever impact your business. And you 
can prioritize IT management, investments and 


resource allocations to optimize your business 
performance. So you can solidly align your IT 
investments with strategic business goals: 
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And protect the delivery of vital business services 
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logistics and distribution— whatever is most 
critical to your company’s success. It’s enterprise 
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Bell Labs Wins 
DARPA Contract 


The Defense Advanced Research 
Projects Agency has awarded the 
Beil Labs division of Lucent Tech- 
nologies Inc. an $11.5 million con- 
tract to research, develop and 


demonstrate a wireless battlefield | 
communications system based on | 


multiple-antenna technology with 
data rates in the gigabit range. 
Bell Labs will attempt to boost 
performance by sending multiple 
transmissions on the same fre- 
quency over multiple antennas, 
according to Murray Hill, N.J.- 
based Lucent. 

Bell Labs will test the technol- 
ogy this fall, in what it called the 
world’s first self-forming multi- 
ple-input, multiple-output net- 
work, with 20 vehicles equipped 
with Bell Labs Layered Space 
Time mobile systems at the Naval 
Air Engineering Test Station in 
Lakehurst, N.J. 


Optum Updates 
Warehouse App 


Optum Inc. last week announced 
the latest version of its flagship 
warehouse management applica- 
tion, Move 7i. Enhancements in- 
clude the ability to do ad hoc 
queries and share warehouse- 


related data in real time, eliminat- | 


ing the need for third-party re- 
porting systems, according to the 
White Plains, N.Y.-based supply 
chain software maker. Move 7i is 
available now. The cost of Move 
7i for the average enterprise cus- 
tomer is $250,000. 


RedDot Rolls Out 


Content Manager 


Enterprise content management 
vendor RedDot Solutions Corp. in 
Oldenberg, Germany, announced 
RedDot Extended Content Man- 
agement Suite. Designed for mid- 
size businesses, the XCMS in- 
cludes tools for creating, review- 
ing, managing and archiving con- 
tent from various sources, plus 
full indexing and search capabili- 
ties and more. Pricing starts at 
$120,000 for the complete suite. 
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‘Think Outside 
‘The Gates 


NFORMATION TECHNOLOGY security groups 
continually ask how they can erect stronger 


walls to keep the barbarians out of their electron- | 


ic fortresses. Perhaps they should be asking why 
there are so many barbarians in the first place. 


The hordes at the gates 
aren’t mercenaries but an 
army of unwitting con- 
scripts. Most are con- 
sumers — your neighbors, 
in-laws and even your kids 
— who unknowingly had 
their computers hijacked 
by worms, viruses, mali- 
cious JavaScript embedded 
in Web pages they visited, 
rogue ActiveX controls and 
a host of other arcane 
mechanisms that deliver 
advertising and enable services that | 
vendors are quite sure people need. | 

When a worm like Mydoom com- 
mandeers home PCs and creates a mas- | 
sive denial-of-service attack, the indus- 
try and even some tech-savvy users 
blame the victims for the problem. 
They say that consumers should have 
known that an e-mail with a .zip file at- 
tachment that was addressed from a 
friend and passed by their antivirus de- 
fenses without a problem was a worm. 
And that the HTML-formatted mes- 
sage that looked for all the world like 
a Microsoft Web site page was actually | 
a phishing scam to steal their pass- 
words, or a ploy to install Trojan hors- 
es or spyware. The attitude is, “You 
clicked on that? You moron!” 

But let’s not forget who created this 
mess. It wasn’t the consumer. A PC | 
connected to the Internet is quite pos- | 
sibly the worst consumer appliance | 
ever invented. In fact, it’s not an appli- | 
ance at all. The Xbox is a consumer | 
appliance. A PC is a general-purpose | 
computing device masquerading asa__| 


ROBERT L. MITCHELL is 
Computerworld’s senior 
features editor. Contact 

him at robert_mitchell@ 

computerwortd.com. 


consumer product. Peel 
away the colorful Win- 
dows veneer, and you have 
a machine that’s overly 
complex, poorly designed 
for security and comes 
packaged with unrealistic 
expectations. 

If you haven’t tried to 
help a frustrated home 
user recently, you have no 
idea how bad the situation 
is. My teenage neighbor 
came to me with a laptop 


| 
| 
| 


that wouldn’t load the paint program he | 


received for Christmas. Every time he 


tried to install it, the Windows Installer | 


service would crash. In the course of 
trying to fix the problem, I ran up 
against seven viruses and more than 160 
spyware and adware files. The system 
installation was just two months old. 

I spent the better part of a day ina 
determined but unsuccessful effort to 
clean it before I finally wiped the disk 


and started over. As I gave my neighbor | 


an hour-long lecture on how to avoid 
future problems, I saw his confused 
look and realized how wrong this 
whole situation is. Why on earth does 
a consumer need to know all this stuff? 
The idea that consumers should con- 
figure security on PCs is ridiculous. 
People who mess with the confusing 
security settings by checking boxes or 


moving those silly security-level sliders | 


up a notch are likely to find that they 
can no longer view some Web content. 
Or they'll end up being pestered by 
endless pop-up windows prompting 
them to accept cookies and ActiveX 


controls at every click of the mouse. 

Home users have no corporate IT 
security manager looking out for 
them. The IT industry should take 
more responsibility for consumer se- 
curity, but efforts to date have been 
weak and ineffective. Most recently, 
Microsoft put a bounty on the head of 
the architect of the Mydoom worm 
while warning people not to click on 
e-mail attachments. 

Vendors also put the onus on con- 
sumers to install updates such as last 
week’s highly critical ASN.1 patch 
(MS04-007) from Microsoft. But they 
forget that many people still use dial- 
up connections. How many PC con- 
sumers are even aware of Windows 
XP Service Pack 1? And if they knew 
about it, would they be able to down- 
load the hundreds of megabytes of 
files through a 56K modem? How 
many could find their way through the 
Microsoft Web site to order a CD ver- 
sion for $9.95? 

Microsoft refers Windows XP users 
back to their PC vendors for support. 
Once there, if they’re lucky, they may 
get a free trial offer for security soft- 
ware when they buy a machine, but 
they often find little or no guidance on 
security best practices. 

Consumers don’t want to be com- 
puter experts, and they shouldn't have 
to be. The legions of hijacked home 
PCs only compound the problem of 
maintaining corporate IT security. It’s 
time to cut the sanctimonious attitude, 
stop expecting consumers to secure 
their own machines and get to work 
doing the job for them. When the in- 
dustry takes control of the problem 
away from consumers, the worm cre- 
ators will finally lose their drone 


armies. @ 44636 


| WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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Gateway’ servers are the 
no-risk policy for the 
California Department 
of Insurance. 













“We standardized on Gateway because in the 
end, it all comes down to support and cost. 
With Gateway we get the best of both.” 


Jesse Castillo, Network Support Manager 
California Department of Insurance e 





Gateway listened to the problems facing the California Department of 
Insurance. Their 14,000 employees said e-mail was. fast becoming the 
most vital communication method for agents, companies, and the 
public. However, their e-mail system was outdated. 


The solution? Three sets of clustered servers to deliver faster response 
by removing bottlenecks and balancing unpredictable processing loads, 
while providing high system uptime. 


Now they have an e-mail system that delivers increased productivity 
and reliability with only 9 servers—instead of 14. 


To find out why our server and storage technology _ 
is a better business policy, call your Gateway 
representative. 
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Gateway” 975 Series Gateway” 840 Serial-ATA 
2U, High-Availability Server RAID Enclosure 


Gateway Technology 
Lifecycle Services 

Gateway can support your technology 
needs, no matter where your agency is 
in the technology lifecycle. 


2U Rack optimized Storage Chassis 


* Scales up to 2TB for under $6,000 
or 3TB for under $7,200 


* Hot-swappable SATA 7200 RPM Hard Drives 
* Integrated SATA RAID Controller 


+ 3-Yr. Parts/Labor Limited Warranty/ 
3-Yr. Next Business Day On-Site! 


$3,999.00 es . 


Call: 877-878-3256 


Go to: www.gateway.com/corp/cmpwrd 


Award-Winning Gateway 


Customer-Centric Support 


Gateway has teamed with IBM® Global 
Services to provide phone and next 
business day, 4-hour, and 2-hour 
on-site support. ! 
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N THE 1990S, Whirlpool Corp., the No. 1 U.S. 
appliance maker, was a mode! “metal bender” 
— an engineering and manufacturing com- 
pany whose core competencies were quality 
and cost reduction. It sold to big retailers like 
Sears, and customers viewed its products as 
commodities differentiated only by price. 

As the decade closed, Whirlpool executives, 
led by Chairman and CEO Dave Whitwam, real- 
ized that the industry was snating. They want 
ed to turn the company into a customer-focused 
innovator whose unique products would breed 
consumer loyalty. Whitwam had a novel idea 
about where that innovation would come from: 
everyone in the company. “He wanted to embed 
innovation as a core competency,” says Nancy 
Snyder, vice president of leadership and compe- 
tency creation at Whirlpool. 

The idea was so different from the traditional 
approach to innovation — in which a strategic in- 
novation group or “s works” is isolated from 
the pressures and bureaucracy of mainstream life 
— that consultants didn’t believe it would work. 

“We talked to every 

FURTHER READING major consulting firm 


in the world,” Snyder 
Acase study of the recalls. “And all of 


Lee eed them said, ‘Don’t both- 
available in book form: 
Biel ea Le 
rere eee LL 
ERE MCR MHC 
OR aie eure 
by Nancy Tennant Snyder 
and Deborah L. Duarte 
(Jossey-Bass, 2003). 


er. Innovation comes 
from a few at the top.” 
Finally, Whirlpool 
executives found soul 
mates at Strategos, 
re Chairman Ga 
Hamel told them that a 
democratic innovation 
process could be en- 
abled by technology. Today, the Benton Harbor, 
appliance giant has more than 500 
ideas in its innovation pipeline, and it’s reaping 
the benefits with unique products (see next page). 
“Whirlpool changed their tune awfully quickly, 
says David MacGregor, an analyst at Longbow Re- 
search in Independence, Ohio. “They’ve done a 
very nice job in innovation, and that has been ve 
important to their results over the last few years.” 


Nancy Snyder and others at Whirlpool debunked the popular notion that “innovation comes from a few at the top.” 


INNOVATION 


DEMOCRACY 


IT has helped Whirlpool build a supply chain 
of creative ideas that meet customer needs. 
By Kathleen Melymuka 


Innovation Infrastructure 

Whirlpool’s approach was to use IT to facilitate 
innovation much as it has been used to stream- 
line supply chains. The company would re-engi- 
neer management processes that slow down 
innovation and use IT to improve and accelerate 
the innovation chain from idea to final product. 
The key was to encourage many low-cost “strat- 
lets” (or small strategies) rather than a few big- 
budget projects. 

To embed innovation as a core competency, 
people would need training, access to expertise 
and small amounts of seed funding, freedom to 
work on their ideas and a way to share informa- 
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tion. “You begin to see the magnitude of infrastruc- 
ture that has to change to support it,” Snyder says. 
“And remember, we weren't adding on to a core com- 
petency. We were creating one that didn’t exist.” 

Snyder put a leadership team in place that includ- 
ed a global director of knowledge management, three 
regional vice presidents of innovation and regional 
innovation boards (I-Boards) to set goals, allocate re- 
sources and review ideas for funding. Later, each ma- 
jor business unit also established an I-Board. Twen- 
ty-five people from each region were trained to serve 
as in-house innovation consultants, or I-Mentors. 

Whirlpool built an IT intranet infrastructure 
called the Innovation E-Space. It starts with the 
“fuzzy front end” of innovation where random in- 
sights are systematically generated and shared to 
spark ideas. The home page links prospective inno- 
vators to all the tools and resources they need, 
from insight libraries and innovation templates to 
I-Mentors. It provides “an informal social system 
that works below the hierarchy level,” Snyder says, 
“and it uses technology to enable that.” 

The back end is the I-Pipe, a dashboard view of the 
innovation pipeline adapted from Strategos. It tracks 
ideas from concept to scale-up and provides project 
details as well as the big picture, enabling manage- 
ment to focus on areas in need of attention. For ex- 
ample, a dozen innovations that deal with pricing 
may indicate that there’s a problem in that area. In 
this way, says Hamel, innovators create strategy and 
top managers “edit” it. 

The IT infrastructure didn’t require an extensive 
investment, says CIO Esat Sezer. On the front end, 
Whirlpool used a Lotus Notes-based intranet and 
added new capabilities using collaboration tools like 
QuickPlace and Sametime from Lotus. For the I-Pipe, 
the company built a platform on its SAP infrastructure 
using SAP’s xApps for project resource management. 


Lego Blocks 

Whirlpool doesn’t sit back and wait for employees to 
innovate. Managers convene cross-sections of em- 
ployees for formal innovation sessions (see below). 
Led by an I-Mentor, the teams reflect on customer 
needs, industry trends and their own experience to 
come up with insights. “We think of these insights 
as the Lego blocks of innovation,” says Strategos’ 
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RUBBER MEETS ROAD 


Representative products from Whirlpool's innovation supply chain 


areas in India, selling for 
less than $75 


= Premium-priced, high- 
tech, energy-efficient, front- 
loading washer and dryer 


@ Modular garage accessories 
and appliances for men 


@ Range with refrigeration 
capabilities 

= Customizable grills, cool- 
ers, warmers, taps, ovens 
and sound systems for 
tailgate parties 

® Double-tub sink with small 
dishwasher on one side 


& Small, bedside cooling 
unit for storing medicine 
and baby bottles 


= Basic refrigerator for rural 
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| Hamel. “We go through a systematic process of gen- 
| erating insights, creating grist for the mill.” 
| Using IT to support innovation sessions was chal- 
lenging, Hamel acknowledges. “Most times when 
you apply IT, you're trying to bring more discipline. 
In innovation, you're also always trying to support 
serendipity and creativity — to use IT to dramatically 
improve the odds of serendipity happening,” he says. 
Serendipity happened when a team from market- 
ing played with the concept of appliances for men. It 
| refined the idea into a modular system of garage ap- 
| pliances and storage units, a business that was spun 
| off as a very successful separate brand. Tom Arent 
took part in those early sessions. Now he’s general 
manager for Gladiator Garage Works. 
“At the beginning, it was just an added task, very 
informal,” he says. “We were moving the innovation 
| agenda forward while doing our day jobs. We sent 
line drawings of product concepts over the Internet. 
We posted our learnings on the intranet, and all the 
| garage lovers came out of the woodwork with ideas.” 
Employees like Arent are expected to make time in 
their days for the less-demanding, early stages of an 
innovation project. Once they receive seed funding, 





their managers help them find more time to move 
the innovation ahead. Eventually, they may be as- 
signed to the project full time. 

Tammy Patrick, global director of knowledge man- 


| agement, says the thrill of achievement is its own re- 


ward, and innovators receive no bonuses or perks. 
“Innovators get charged up by the opportunity for 
exposure and the fact that someone listened to their 
idea,” she says. “They learn new tools and meet new 
people, and that often opens doors in their careers.” 


Leadership Required 


| The hardest part for Whirlpool has been changing 


the way leaders see their roles. “Only leaders can 
change an environment and allow an innovator the 
freedom to pursue things,” Snyder explains. But it 
requires a huge shift in thinking. “Leaders are no 
longer controlling, managing. Now they’re removing 
barriers, setting up seed funds, interacting,” she says. 
“It was very hard, and there are still a few holdouts, 


| but it’s hard to deny the change.” 


So far, more than 500 I-Mentors and more than 
10,000 employees have been trained in innovation, 


and this year, Patrick is launching a mandatory 


e-learning innovation curriculum. Innovators have 
introduced more than 7,500 ideas, and the company 
has run more than 360 low-cost experiments re- 


| sulting in many new products and strategies, some 


very successful. For example, the high-tech, premi- 
um-priced Duet won Whirlpool 16% of the front- 
loading washer/dryer market. Gladiator Garage 
Works has been the most significant revenue produc- 
er in a nonappliance business in Whirlpools history. 
What's next? Whirlpool is working with Cisco Sys- 


tems Inc., Sun Microsystems Inc. and Siemens AG to 


develop “connected homes,” with routers, security 
systems and Internet-connected appliances all con- 
solidated into a “smart home” system. 

“There’s not a big market for that right now,” 
MacGregor says. “But a lot of good ideas have come 


| out of that, and over the next five years, things may 


change dramatically.” If that happens, he says, “from 
an innovations standpoint, Whirlpool will be posi- 
tioned at the leading edge.” @ 44286 


Melymuka is a Computerworld contributing writer. 


| Contact her at kmelymuka@yahoo.com. 


How Whirlpool develops ideas and turns them into products. 


EVOLUTION 


OF ANIDEA 


DISCOVERY: Employees convene to discover ran- 
dom insights by looking at the world through dif- 
ferent “lenses”: corporate core competencies, 
what-ifs, social discontinuities and megatrends, 
orthodoxies, customer needs, corporate strategy 
and competition. (Examples of insights: Garages 
are always a mess. What if men bought appli- 
ances?) Insights are collected, categorized and 
added to an intranet insights library, where anyone 
in the company can peruse them for inspiration. 


IDEATION: Employees 
focus on a problem or 
area using previously 
discovered insights 
to fuel brainstorming. 
They cluster insights 
to discover patterns 
and “crash” insights 
together to create 
new ideas. (Example: 
Men might buy appli- 


ances for use ina 
garage.) 


IDEA MARKET: The 
most promising 
ideas are pub- 
lished online, 
where anyone can 
add feedback and 
offer help. Heads 
of business units 
troll for promising 
ideas related to 
their businesses. 


BUSINESS CONCEPT: 
The innovator or 
team uses online 
resources to refine 
the idea and pre- 
sents an “opportu- 
nity brief” to the 
|-Board. If the board 
sees potential, it 
grants seed funding 
- usually $20,000 
to $100,000. 


EXPERIMENT AND 
PROTOTYPE: As 
the idea devel- 
ops, it moves 
through increas- 
ingly arduous toll 
gates to prove its 
potential. 


SCALE UP: Only 
when an idea 
makes it to the 
final stage does 
the company in- 
vest substantial 
human and finan- 
cial resources to 
scale it up for in- 
troduction to the 
market. 
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Equipment Rental 
Company Hires ClO 


NationsRent Inc., a Fort Laud- 
erdale, Fla.-based construction 
equipment rental company, has 
named James A. Haid executive 
vice president and CIO. He will be 
responsible for the design and 
management of the IT infrastruc- 
ture at the company, which oper- 
ates 268 locations in 26 states. 
Haid previously held executive 
positions at Convergent Media 
Systems Corp. and PSiINet Inc. 


Perot Wins $40M 
Outsourcing Deal 


Parsons Corp., a Houston-based 
provider of engineering and con- 
struction management services, 


has awarded a five-year, $40 mil- | 


lion IT outsourcing contract to 
Perot Systems Corp. The deal in- 
cludes software development, 
networking, electronic messag- 
ing, computer-aided design and 
support for global projects. 


IT Exec Fills New 


Role at Shurgard 


Terry Prether, a former IT execu- 
tive at Attachmate Corp., has 
joined Shurgard Storage Centers 
Inc. as ClO. Shurgard is a self- 
managed real estate investment 
trust in Seattle that owns and 
runs about 530 properties. 
Prether is stepping into the com- 
pany’s first executive IT position, 
which was created as part of a 
restructuring of management and 
corporate governance. 


SEC Names CIO 


The Securities and Exchange 
Commission has named R. Corey 
Booth as its ClO and director of 
the Office of Information Technol- 
ogy. Booth, 33, had been an as- 
sociate principal at consultancy 
McKinsey & Co. He will oversee 
and lead the development of a 
multiyear, strategic IT improve- 
ment plan that will help the 
agency's programs better serve 
the needs of U.S. investors. 








eBARA GOMOLSKI 


When Cheap 
Is Expensive 


Y DAD USED TO SAY, “Cheap can be 
expensive.” He wasn’t a wealthy man, 
but he believed in buying quality 
goods because, over time, they often 
proved to be more economical than 
low-cost substitutes. To put it another way: When you 
go for short-term savings, you often increase long-term 
costs. Sometimes we buy lower-cost goods because of 


a shortage of cash. If you 
have only $10,000 to spend 
on a car, you aren’t going to 
get the Mercedes. Howev- 
er, short-term investment 
decisions aren’t just a re- 
sult of a lack of cash. Man- 
agers make short-term in- 
vestment decisions for 
many reasons. Sometimes 
they’re trying to meet 
short-term objectives, such 
as improving their quarter- 
ly profits, which seems to 
be a more urgent goal than 
investing for the long term. 
Besides, two years from 
now, they may be long gone and the 
health of the firm will be somebody 
else’s problem. 

Shortsighted IT decisions are a par- 
ticularly big problem because the con- 
sequences are inherently long term. 
For example, a company may buy 
“cheaper” PCs to save money in the 
short term. However, since those PCs 
have a life cycle of about three years, 
the company will be forced to live 
with the consequences of its decision 
for that long. The consequences of 
short-term thinking are even more 
dramatic when we consider that many 
applications have a life cycle of 10 
years or more. 

There are two areas in particular 
where short-term thinking regarding 
IT is going to sting many organiza- 


BARBARA GOMOLSKI, a for- 
mei Computerworld 
reporter, is a vice presi- 
dent at Gartner Inc., 
where she focuses on IT 
financial management. 
Contact her at 
barbgomolski@yahoo.com 


tions in the coming years: 
@ Underinvesting in IT. 
Companies have been 
squeezing IT budgets for a 
few years, and in many 
cases, that was a necessity. 
While IT budget cuts may 


be needed, companies have | 


to maintain some balance 
between cost reduction 
and long-term investment. 
Many of the IT managers I 
talked to during the past 
year were asked to make 
extraordinary cuts in their 
IT budgets. These reduc- 
tions were so deep that 
they now need significant upgrades to 
their IT infrastructures and have a 
backlog of application development 
needs that they won’t be able to ad- 
dress in the foreseeable future. 

For example, many companies are 
still running core systems on old tech- 
nology that really should be replaced. 
However, because of the lack of ongo- 
ing investment in IT infrastructure, 
many companies are finding that the 
infrastructure upgrades required to 
launch new enterprise initiatives make 
the efforts cost-prohibitive. 


§ Offshore outsourcing. [t probably cuts 


costs in the short term, but not neces- 
sarily in the long term. Sending IT 

work offshore can be economical, but 
too many firms are rushing into these 
arrangements because they're now in 


| 
| 
| 


vogue. Considering only hourly labor 
rates isn’t a sufficient analysis to de- 
termine whether offshore is the way to 
go. IT managers must also consider 
communication and collaboration is 
sues and their resulting costs, as well 
as risks. In many organizations, unfor- 
tunately, the decision to send IT work 
offshore turns into the proverbial “re- 
ligious war,” with IT managers taking 
a defensive and protective posture. 
Lhis is certainly understandable, but it 
often fails to get the important issues 
on the table. 

So, how do you get other executives 
to view IT investments in a long-term 
fashion? The most effective way, I’m 
afraid, it to provide the numbers that 
will show them costs over the long 
term. This exercise may mean provid 
ing a five-year view and performing a 
total-cost-of-ownership analysis on 
the product or service at hand. 

Take the “cheaper PC” example. If 
an IT manager wants to demonstrate 
that the long-term cost of owning 
these PCs is actually more than it is 
for the more expensive units, the argu 
ment might go something like this: He 
could point out that the acquisition 
cost of the hardware is only a fraction 
of the fully loaded five-year costs, and 
then he could estimate the enormous 
amount of time that staffers will spend 
fixing the machines and ordering re- 
placement parts to show that there are 
no real cost savings. 

Often, IT managers are too busy or 
simply unwilling to put the time into 
doing these analyses. However, if we 
want our business counterparts to 
start thinking about the long-term im 
plications of IT decisions made today, 
we have to move beyond tactical, day- 
to-day concerns ourselves. @ 44372 
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PROJECT MANAGEMENT 


Balancing Act 

Businesses that move at light speed 
want projects done fast, too. Here’s how 
project managers deal with the pressure 
and hold the line on quality. 


Surviving the Sponsor Exit 
We offer Il strategies for 
keeping your project on track 
when the business sponsor 





THESE ARE CHALLENGING 
times for IT project man- 
agers. The business wants 


new systems built yesterday 


to meet customer demands. 

IT projects have to be run 
through the ROI gantlet and get intense scrutiny 
from all corners of the company. Business condi- 
tions change midproject. And a few coding cow- 
boys in the programming shop wish the process 
cops, who enforce strict adherence to the devel- 
opment methodology, would lighten up. 


But taking shortcuts can lead to project failure, 


which isn’t good for the business or IT credibili- 
ty. So IT projects are caught between the need 





Res 


Thieves Among Us 

The best project managers have a lot of 
fine traits. The most useful one might be 
their ability to circumvent the system, 
says columnist Mark Hall. 


urcetul 


Project 


Manager 


loday’s project managers have to learn 
on the fly, cope with business turmoil 
and balance agility with quality. 


re 


EDITOR’S NOTE 


for speed and flexibility on one hand, and the 
need to follow a disciplined, successful method- 


| ology on the other. 


“It’s a delicate balancing act,” says Jack Probst, 


assistant vice president of IT process and gover- 


nance at Nationwide Insurance Cos. Fortunately, 
Probst says Nationwide’s CIO, Mike Keller, ex- 
plains to business leaders why IT project disci- 
pline is important. He also points to successful 
projects as proof that the discipline works. “That 
gives us some breathing room with the business 
community,” a grateful Probst told me. 

That’s the way it should be: the CIO providing 
political cover so IT project managers can get the 
job done right. Which is not to say that IT proj- 


ects should go as slowly as possible or get bogged 


down in bureaucracy. The IT department that 


| delivers systems too late to meet the business’s 


needs is doomed to irrelevance. 
This special report will give you some ideas for 
keeping your projects in balance. @ 44472 


Mitch Betts is Features editor at Computerworld. He 


| canbe reached at mitch_betts@computerworld.com. 


" KNOWLEDGE CENTERS ONLINE 


The IT Management Knowledge Center h 
resources on topics such as project managemen 
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O MORE WITH LESS” is the 

mantra heard up and down 

the corridors at many com- 

panies. But the phrase has 

taken on new meaning for 
IT project managers. Cost-focused 
organizations are demanding deliver- 
ables within weeks instead of months 

— with functionality that offers imme- 

diate, bottom-line benefits. 

But as IT managers try to apply prin- 
ciples of the rapid application develop- 
ment (RAD) approach and other agile 
project management methodologies, 
they’re taking care not to forsake test- 
ing and quality in exchange for speed. 

“It’s an uphill battle. Everyone real- 
izes that if you sacrifice quality today, 
you're going to pay for it in the future,” 
says Kevin Heard, a project manager 
at Clarkston Consulting, a Durham, 
N.C., consulting firm that serves the 
life sciences and consumer products 
industries. “If you focus on quality to- 
day, it will, in the long term, pay bene- 
fits — even if that leads to a slightly 
longer project cycle.” 

lhe inherent conflict that exists be- 
tween rapid project management and 
quality control “compounds itself if 
you work in an environment that con- 
stantly churns projects,” says Chuck 
Tatham, vice president of marketing 
and development at Changepoint 
Corp., an IT services provider in Rich- 
mond Hill, Ontario. That’s particularly 
true, he says, when staff resources are 
spread thin and project managers need 
to quickly identify available skills. 

“You need to emphasize people, the 
communication part of it, and you have 
to be very adaptive in your planning. 
Use a baseline and hold your people to 
that baseline,” says Margo Visitacion, 
an analyst at Forrester Research Inc. 


On the Fast Track 


IT project managers must also ensure 
that the project scope can be realisti- 
cally achieved under a compressed 
time frame, adds Visitacion. Project 
managers say business leaders are in- 
creasingly urging them to cut corners 
to deliver needed functionality on 
time. For instance, one IT manager at a 
Midwestern manufacturer says he’s be- 
ing pressured by senior business lead- 
ers to rush an ERP implementation by 
bypassing critical business processes. 
“There’s always a lot of pressure” 
from executives to take shortcuts on 
IT projects, says Ken McLennan, se- 
nior vice president of business solu- 
tions at Fujitsu Consulting in Edison, 
NJ. He says project managers must be 
good facilitators and help business ex- 
ecutives understand the risks of cut- 


ting corners. “If companies are seen 
making mistakes and that gets publi- 
cized, that could hurt their share price, 
so there’s a tremendous balancing act 
going on,” McLennan says. 

Project managers and other IT exec- 
utives say they’ve taken steps to strike 
a balance between the need for speed 
and adequate testing and quality con- 
trol. Eighteen months ago, The EW. 
Scripps Co. established “an extremely 
abbreviated” project life-cycle method- 

ology, called FastTrack, says Oscar de 

Jongh, managing director of the proj- 
ect management office at the Cincin- 
nati-based media conglomerate. 

With the FastTrack approach, a proj- 
ect’s scope is laid out in a one- or two- 
paragraph e-mail message, followed by 
a checklist of repeatable, auditable 
processes that project teams must fol- 
low, such as defining project require- 
ments, estimating resources and test- 
ing, says de Jongh. Those processes 
must be completed before a project can 
be closed out. The approach blends 
characteristics of so-called waterfall 
project management techniques, where 
tasks are laid out sequentially and de- 
signed to overlap, with two-to-20-hour 
time frames for project completion. 

This is true even for small projects 
like changing the size of an advertising 
window on one of EW. Scripps’ media 
Web sites, says de Jongh, whose firm 
manages IT projects using software 
from PlanView Inc. “I’ve seen it all 
happen in the course of an eight-hour 
day, and it works,” he says. “It’s as much 
about cultural change as anything else.” 

Nationwide Insurance Cos. is apply- 
ing an agile project management ap- 
proach to an effort started in May to 
replace its distributed customer-facing 





Businesses that move at light 
speed want projects done fast too. 
Here's how project managers dea 
with the pressure and hold the line 
on quality. By Thomas Hoffman 
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How to Ease the’ Tension 


Does your project management office have a 
reputation as oppressive process cops? Try taking 
a more supportive approach. By Thomas Hoffman 


RONTLINE PROJECT MANAGERS often view 
r the staffers of project management offices 

(PMO) as “process cops” whose mission is 
to ensure that project teams are hitting their 
deadlines and adhering to corporate procedures 
and quality-control criteria. They know that if their 
team isn’t hitting those measures, the PMO won't 
sign off on the project phase. 

This Big Brother view has occasionally led to 
latent hostility between project managers and 
PMO officers. “There's definitely tension some- 
times between PMOs and the front 
line,” says Jeff Collins, president of 
Innovative Management Solutions 
Inc., a Newport Beach, Calif.-based 
project management consultancy. 

Sometimes it comes down to 
whether PMOs are staffed with the 
right people or have executive sponsorship, say 
Collins and other observers. Still, most executives 
who run PMOs say the best way to avoid tensions 
with project managers is to position the office as a 
support organization that can provide mentoring 
and coaching in addition to establishing project 
management guidelines and controls. 

For instance, before The E.W. Scripps Co. es- 
tablished a PMO two years ago, the company's 
business units had always acted autonomously on 
IT projects, says PMO managing director Oscar 
de Jongh. So instead of taking a confrontational 


ant 


systems for its property and casualty 
insurance agents, says Jack Probst, as- 
sistant vice president in the office of 
IT process and governance at Colum- 
bus, Ohio-based Nationwide. Rather 


than roll out a new set of systems to all | 


25,000 agents at once, Nationwide is 
applying a proof-of-concept approach, 
testing pieces of functionality with se- 
lected agents before extending proto- 
types of the system across the country. 
The project draws upon a quality- 
focused framework that Nationwide be- 
gan using in 2003 called Solution Deliv- 
ery. The framework, based on IBM’s Ra- 
tional Unified Process methodology and 
an agile project management approach, 
has delivered marked quality improve- 
ments, says Probst. For instance, tests of 
customer-facing systems being imple- 
mented in various states have shown 
that the systems have achieved or ex- 
ceeded the quality equivalent of CMM 
Level 5, a set of software development 
standards set by Carnegie Mellon Uni- 
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approach to IT project governance, says de 
Jongh, the PMO’s objective was to foster project 
management disciplines “and manage the tech- 
nology component of our business as a business. 
“We certainly didn’t want to go down a path of 
malicious compliance and have people say, ‘I'm do- 
ing what you asked me to do. What more do you 
want?’ ” adds de Jongh. So if a project manager 
disagrees with the PMO on a requirement and 
wants to approach an aspect of a project differently 
from what the PMO would advise, “we'll allow them 
to,” de Jongh says. 


An Important Call 
When Dennis S. Callahan joined 
The Guardian Life Insurance Com- 
pany of America three years ago as 
CIO, “there was very little in the 
way of process and controls - it was an ‘anything 
goes’ environment,” he says. Over the past three 
years, New York-based Guardian has built a PMO 
team and implemented a project management 
process, a project life cycle and an enterprisewide 
tracking tool to improve control. Recently, Calla- 
han and his team made refinements to help bring 
the PMO, the processes and the adoption rate to 
the next level, including the development of a 
more balanced coaching and contro! model. They 
also created a PMO steering committee that in- 
cluded several project managers and reorganized 


versity’s Software Engineering Institute. 
Probst says Nationwide plans to be- 
gin auditing its projects by the end of 


March once it has incorporated portfo- | 


lio management software from Red- 


wood City, Calif.-based Niku Corp. into 


the Solution Delivery framework. 


Dice and Deliver 
Sometimes necessity really is the 
mother of invention. For Primary In- 


dustries and Resources SA (PIRSA), an 


economic development agency within 
the Government of South Australia, 
a waterfall approach to replacing 20 
legacy systems with the Primary In- 


dustries Information Management Sys- | 


tem (PIIMS) was taking too long and 
wasn’t able to deliver the business re- 
quirements sought by end users, says 
David Blair, director of information 
services at PIRSA in Adelaide. 

So PIRSA, which began developing 
the Unix-based system in late 2001, de- 
cided along with project partner Fujitsu 


| “are able to see and touch the system 


| approach to the RAD technique, says 


What You 
Can Do 


= Coach and mentor project 
managers. Don’t dictate stan- 
dards using a top-down, check- 
list-type approach. 

sw Communicate regularly. Fuji- 
tsu Consulting has established 
what it calls a “scrum” meeting 
- a 15- to 30-minute project up- 
date held at the same time every 
day with all key constituents. 

= Get buy-in. Effective PMOs 
receive executive endorsement 
across all lines of business and 
absorb project information in 
the least invasive ways. 

= Try to measure the success 
of the PMO through a customer 
satisfaction survey, reflecting 
that the organization is adaptive 
and flexible. 

= Create a PMO steering com- 
mittee that includes frontline 
project managers. 

= Market the benefits of having 
a PMO to the stakeholders. 


the PMO team to mirror the IT organization's align- 
ment with Guardian's businesses. 

Now a PMO manager works directly with spe- 
cific senior business systems officers, helping to 
create a deeper partnership and business focus. 
And in September, Guardian's five-person PMO 
made a small but important change in how it alerts 
project managers if they've forgotten to complete 
a time sheet or classify the project in question. 


Consulting that it would complete the 
core system using a waterfall approach 


| and then develop additional function- 


ality using a RAD methodology. 

After completing the core system in 
June 2002, PIRSA and Fujitsu broke the 
project into features that they could de- 
liver to end users each month, starting 
in November 2002, such as tracing the 


| origins of diseased animals for the Ani- | 
| stand that, and they’re not always go- 


mal Health business unit, says Vanessa 
Beer, a Fujitsu consultant. 
Using the RAD approach, end users 


all the time, and they’re constantly be- 

ing trained on the new features,” says 

PIIMS project manager John Cock. 
And by shifting from the waterfall 


Beer, “developers were delivering ex- 


| actly what the businesses required, and | 


there was no documentation hurdle 

between them. They didn’t get hung up | 
on, ‘This is what I want, and you didn’t | 
deliver it.” 


Instead of e-mailing project managers and 
copying business officers, the PMO now calls 
project managers first to discuss and resolve 
compliance issues. Guardian's project teams 
have improved their rate of compliance by 70% 
since the new alert system was launched, says 
Shelley Mcintyre, second vice president of the 
PMO and application development. 

In the District of Columbia, which established a 
PMO for a multiplatform ERP system in January 
2002, the office was designed to both oversee 
the project “and be an integral part. So the philos- 
ophy right away starts to ameliorate any tensions 
between the PMO and others,” says Sandy Lazar, 
director of key systems for the city 

The ERP project includes contributions from 
multiple constituents, including city IT workers as 
well as vendors such as Unisys Corp., Bearing- 
Point Inc. and Boston-based Keane Inc., which set 
up the PMO, says Lazar. “If you came to one of our 
meetings, you wouldn't know who were district 
employees and who were contracts, and which 
were contractors for Keane or Unisys,” he says. 
“Everyone leaves their badges at the door.” 

Communication goes a long way toward easing 
tensions, but collaboration tools and other tech- 
nologies can also help. At Fox Filmed Entertain- 
ment in Los Angeles, a portfolio management 
package from Niku Corp. helps provide oversight 
time tracking, collaboration and document man- 
agement to support a project management 
methodology from the PMO, says Doug Goetz, 
executive director of IT project management. 

Goetz says he could try to enforce the use of 
the PMO’s methodologies and standards through- 
out Fox's business divisions. But because there’s 
a subset of about 30 project managers at Fox 
business units who don’t work directly for Goetz, 
“we tried to make the tools useful enough so 
they'd be apnealing to use,” he says. @ 43741 


Joe Zucchero, executive vice presi- 
dent and director of the project turn- 
around practice at The Casey Group, 
an IT services firm in Parsippany, N]J., 
says the chief contributor to a drop in 
project quality is overworked team 
members. “If you have people working 
60 to 70 hours a week over a period of 
time, quality is going to drop,” says 
Zucchero. “Savvy organizations under 


ing to plan a best-case scenario.” 
For Heard and his peers at Clarkston 


| Consulting, skimping on quality isn’t 
| even a consideration. “In any FDA-reg- 


ulated environment, quality cannot be 
compromised ... even if that leads to a 
slightly longer project cycle,” Heard 


| says. @ 43742 


TAKING PROJECTS TO THE EXTREME 
The extreme project management approach can 
help you get your critical business stakeholders to 
take charge of their projects 
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IN THE COURSE OF HIS CAREER aS a 


CAREERS software developer, project manager 
and now acting IT director at the 

Corporation for Public Broadcasting (CPB), Mark 
Reilley has seen all of his employers repeat the same 
mistake of choosing a star technical expert or a 
bored but deserving functional manager to take on 
the new challenge of project management. 

‘Project management tends to be viewed as a re- 


ward, rather than choosing the best person for the 
job,” Reilley says. 
John Kocon, project management officer at Oregon 


Health & Science University in Portland, agrees. 
“Even a person with great technical abilities will not 
be successful as a project manager without having 
business knowledge and communications skills. 
They may have strengths in one area, but they can’t | 
have significant weaknesses,” says Kocon. 

A variation on this mistake is relying on project 


managers who look great on paper, with dozens of 
training courses and even certifications to their 


names, but no real horror stories and lessons learned . = 
that nes can apply to the alee at ak pi Learning by doing beats by-the-book 
“T’ve had some real bad experiences with people ; 


who ave certified. They may go by the book, but thet project management any day, say these 


doesn’t mean a whole lot to me,” says Jann Davis, di- 5 7 
rector of systems development and asset manage- mana yYeETS By Jul ] q King 
ment and a former project manager at PacifiCorp, an 2 ‘A Ue 7 C oD 
electric utility in Portland, Ore. “By emphasizing cer- 
tifications, then choosing and training the wrong 
people, we set them up to fail,” Davis says. 

By contrast, true excellence in project management 
is best learned and then applied repeatedly on the 
job, not in a classroom, say veteran IT project leaders 
with track records of success. Here is a compendium 
of some of their most valuable lessons learned. 


Be a Collector of Stories 


In his more than two decades of leading projects in 
hardware, software, research and application sys- 
tems, Alistair Cockburn has come to view successful 
project management as a process of solving pre- 
dictable problems as well as surviving worst-case 
scenarios by applying one or more strategies that 
worked on previous projects. That necessarily means 
learning by doing, says Cockburn, who has never re- 
ceived any formal project management training but 
has managed multimillion-dollar IT projects for 
large companies, including IBM and the Central 
Bank of Norway. He’s also author of two project man- 
agement books, Agile Software Development (Pren- 





8 Even a person with great 
technical abilities will not 
be successful as a project man- 
ager without having business 
knowledge and communications 
skills. They may have strengths 
in one area, but they can’t have 
significant weaknesses. 


JOHN KOCON, PROJECT MANAGEMENT OFFICER 


REGON HEALTH & SCIENCE UNIVERSI Oregon Health & Science’s JOHN KOCON advises project managers to work in as many IT positions as possible. 
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tice Hall, 2002) and Surviving 
Object-Oriented Projects (Ad- 
dison-Wesley, 1997). 

“A core part of the job of 
project manager is coming up 
with inventive ways to get out 
of incredibly constrained situ- 
ations by an escape route that 
worked before,” Cockburn 
says. In one project he man- 
aged, his team was required to 
deliver new software every 
three months. The challenge 
was that it took more than half 
that time to gather and nail 
down users’ exact require- 
ments. 

The solution, which he calls 
the “gold rush” strategy, was 
for programmers to begin 
writing code as soon as they received even partial 
verbal descriptions about what users wanted. That 
way, the project continued to move forward, even 
though refinements were made continually. Cock- 
burn says he used the same strategy on several other 
projects at a time when incremental software devel- 
opment wasn’t nearly as standard as it is today. 

In another case, Cockburn was up against a tight 
deadline and having a problem finding people with 
the right mix of skills to deliver the project on time. 
His solution was to develop a grid that graphically 
laid out the required and available skills and then to 
break the project into stages that coincided with 
technical experts’ availability. 

“A lot of project management is collecting a lot 
of these little strategies,” Cockburn says. “It’s about 
knowing situations and how to buy your way out of 
them.” The best way to gain that knowledge is to 
seek out other project managers and listen closely 
to their stories. “Start a project managers’ club, and 
once a month have a brown-bag discussion group 
where you can collect stories,” he advises. “Project 
management is all about doing what has worked be- 
fore, but a lot of these strategies aren’t obvious.” 

Knowing how to buy your way out of sticky situa- 
tions, of course, requires prior experience in doing 
so, notes Kocon. “That’s why the ideal path to project 
management in IT is having the opportunity to work 
in several different IT positions,” he says. “Maybe 
you start with coding and testing, then work your 
way to managing and into a supervisory role. It’s also 
important that you have business responsibility for 
things like budgeting. A knowledge of the IT organi- 
zation and how IT fits into the overall organization 
to make it successful is critical.” 


Follow Your Instincts 


Before Reilley packs for any trip, he makes a list of 
the days he’ll be away, what he’l! be doing on those 
days and what he’ll need to wear 

in each situation. He works jigsaw 

puzzles from the edges inward. 
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the way you think,” Reilley 
says. At Washington-based 
CPB, “we look at everything as 
a project with a discrete begin- 
ning and a discrete ending. 
The only way to get it done 

is with steps in between. It 
seems to me a mind-set, rather 
than a skill,” he adds. 

Still, beyond the mind-set, 
Reilley says he has acquired 
most other necessary skills, 
such as ferreting out disgrun- 
tled users and coming up with 
diplomatic solutions to nag- 
ging problems before they be- 
come full-fledged crises. 

“I keep my ear to the grape- 
vine for grumbling, so I can 
head off problems at the pass,” 
Reilley says. One of his tried-and-true tactics is to 
address a user’s doubts about a particular project or 
resistance to using new software before the user 
makes it known publicly. “I head for them right off 
and tell them I heard they had doubts about the proj- 


| ect. I offer to answer their questions and show them 


a demo,” he says. “I’ve learned from experience that, 
usually, if end users don’t want to adopt a system, it’s 
because they’re afraid they'll look dumb, not because 
they hate the system.” 

And, Reilley says, there’s a certain salesmanship 
and a lot of psychology involved with performing the 
project management job well. “You're selling change 
to end users and to bosses. You also have to be a 
cheerleader for the team and get to know what moti- 
vates people to perform,” he explains. 

A project manager has to de all of this and at the 
same time not get too involved in any one step in the 
overall process. “The biggest thing is, you have to be 
able to step back and comprehend the whole thing,” 
Reilley says. “As a project manager, you have to keep 
the big-picture view.” 


Follow the Money 


Good project managers must by nature be ultracom- 


| petent multitaskers who pay keen attention to detail 


and consistently follow up on even the smallest 
problems and their resolutions. But frequently, the 
job boils down to the twin issues of politics and fi- 
nances, says PacifiCorp’s Davis. 

Davis’ most recent successful project leadership 
job was managing Project Discovery, a $10 million 
customer service and call center initiative. The key 
to bringing the project in on time and on budget was 
keeping her team members motivated, which meant 
shielding them from politics that can cause resent- 
ments and slow progress. “A project team trusts you 
as the project manager to keep them informed at a 
high level, but not mire them in details,” Davis says. 

The other practical tip she has 
is to personally manage all project 
finances, no matter how large or 


He applies the same kind of sys- 
tematic thinking to managing IT 
projects in his role as acting 
IT director. 

“To me, project management is 


If you have technical know-how and an eye ona 
career in management, becoming a project leader 
is a logical step. Find out how two project 

leaders made the move up: 


QuickLink 21573 
www.computerworld.com 


small. “Once people know that 
someone at the top is looking, all 
the little lunch and dinner charges 
start to disappear,” Davis says. 


@ 43736 


People Skills 


Pay Off 


In a previous job as a consultant at Cap 
Gemini America LLC, John Reaves went 
through a comprehensive project man- 
agement boot-camp program that among 
other things, involved learning all about 
critical paths, Gantt charts and business 
processes. 

In a subsequent job as an engagement 
manager at General Electric Co., he re- 
ceived training in Six Sigma quality 
processes and the corporate giant’s own 
renowned project management methods 
and metrics. 

But Reaves, now a senior IT project 
manager at Wachovia Corp. in Charlotte, 
N.C., says he honed his most valuable 
project management skills - navigating 
tricky politics and relationships and com- 
munications - on the job, not in the 
classroom. 

“The project manager is that individual 
who the Ci0 beats up on, the business 
manager beats up on and the team beats 
up on. What | learned in the trenches is 
to manage all of those respective rela- 
tionships. You have to go in with a thick 
skin,” Reaves says 

An ability to quickly read and resolve 
emotionally charged situations and tc 
take calculated risks are also high on his 
list of skills fine-tuned on the job. Reaves 
recalls one particular horror story in 
which he was brought onto a project 
that was late, $1 million over budget 
and with a client who was ready to sue 
Reaves’ employer. 

The first thing he did was carefully 
read the project contract, combing it for 
rhetoric that could be used as leverage to 
buy more time. He then reviewed all the 
deliverables with the client and began 
negotiating new delivery dates for specif- 
ic pieces of the project 

Three months later, the one-year proj- 
ect, which was renewable for five years, 
was back on track, and the client re- 
newed with Reaves’ company for eac 
of the contract's subsequent years 

“| looked at the contract, saw some 
deliverables that weren't due immediately 
so | could shift resources to work on the 
stuff that was due,” Reaves explains. “It 
was a calculated risk. Today, | continue to 
take so many calculated risks that | won- 
der if I'll be employed tomorrow. But that 
all comes with the territory.” 

- Julia King 
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ourviving 
Sponsor Exit 


Here's how to keep your projec 
on track if your executive sponsor 
By Kathleen Melymuka 


leaves. 


F ALL THE ITEMS that can go 


wrong on a project, the one the | 


project manager has least con- 

trol over is the sponsorship,” 

says Gopal Kapur, president 
of the Center for Project Management 
in San Ramon, Calif. Surveys show that 
when an IT project goes bad, there’s a 
good chance that loss of the business 
sponsor was at least partly to blame. 

The project sponsor is the executive 
or manager with the fiscal authority, 
political clout and personal commit- 
ment to see a project through. But 
what if you lose him to another job or 
another company? What if he’s fired, 
loses interest and gradually withdraws, 
or was never really on board from the 
beginning? There are plenty of things 
you can do to keep the project on 
track, and if you’ve got skills and mox- 
ie, you might even turn the crisis into 
an opportunity. Here’s how: 

PLAN AHEAD. Make sure your project 
has widespread support in the company. 
“Do enough homework on the front end 
so more than just the sponsor believes 
in the project,” says Catherine Tomczyk, 
a project manager at First Data Corp. in 
Greenwood Village, Colo. Otherwise, 





she says, if the sponsor leaves, “you no 
longer have any backing, and your 
project can go down the tubes.” 
PREPARE TO ESCALATE. Talk with your 
sponsor early about the procedure you'll | 
follow if you’re not getting the support 
you need from him. Then write it up for | 
the project notebook and give a copy to | 
him. “That protects the project manager | 
and warns the sponsor,” Kapur says. 
Tomezyk includes an escalation policy 
in her project plan and communicates 
it to everyone involved. “I list who I'll 
be going to if I don’t get an answer 
from a sponsor in 48 hours,” she says. 
USE IT. When a sponsor underper- 
forms, don’t back down. Put the plan 
in action. “I usually end up going to the 
{senior vice president] level once,” 
Tomczyk says. “Then everybody gets it.” 
CONSIDER EUTHANASIA. When the 
sponsor leaves, assess the political situ- | 
ation. “If the project begins falling apart 
because one person left, was it really a 
valid project?” asks Jim Highsmith, di- 
rector of the agile project management 
practice at Cutter Consortium in Ar- 
lington, Mass. If other executives start 
backing away, the project may have 








been the sponsor’s pet rather than a 


true business priority. In that case, he 
says, you're better off killing it than 
letting it drag you down. 

USE YOUR RESOURCES. If the project 
is legit, ask the outgoing sponsor to 
arrange a three-way meeting with the 
incoming sponsor to pass the torch and 
get the new guy up to speed on project 
issues. If the sponsor has left abruptly, 
slow the project down and call an emer- 
gency meeting with key stakeholders, 
your project steering committee and 
your project champion to recruit a new 
one. Make it clear, Kapur says, that with- 
out a sponsor, the project will have to be 
suspended or canceled within a few 
weeks as your team reaches points 
where a sponsor is needed. 

RESIST NEWBIES. Be wary of a spon- 
sor who is new to the company. He 
may lack the political clout you need 
or have other fish to fry. “If you’re in a 
critical phase and your project isn’t the 
highest thing on the new sponsor’s pri- 
ority list, that can be very difficult,” 
says Highsmith. 

REQUIRE A “SINGLE THROAT.” Don’t al- 
low your steering committee to take 
over sponsorship. “Often nobody real- 
ly has that ‘single throat’ accountability 
— the person you grab at the throat if 
something goes wrong,” Tomezyk says. 
“If a group makes the decisions, trying 
to get them to come to consensus can 
immobilize a project.” 

STEP UP. “Don’t go into victim mode. 
Save that for your therapist,” Kapur 
says. Assess your own skills and offer to 
take on as many sponsorship duties as 
you can to extend the project for a few 
weeks while a sponsor is found, he ad- 
vises. “Just tell [stakeholders and others] 
there are four options: suspend, cancel, 
get another sponsor, or delegate author- 
ity to me, and I can begin to do these 
things.” Then find a top-level stake- 
holder as a mentor and ask for help. 

MAKE IT OFFICIAL. If you take over as 
interim sponsor, don’t just sidle into 
the job. Make 
pur says, “people will ask who died 
and made you the king, and they won't 
listen to you.” 

RE-FORM, RESTORM. No matter who 
takes over as sponsor, kick off the proj- 
ect again. In the project lexicon of 
“form, storm, norm and perform,” Tom- 
czyk explains, a team forms, then goes 
through a “storming” period where 
people figure out their roles, then nor- 
malizes and begins to perform. When a 
sponsor leaves, team members may ex- 
pand their roles to compensate. 

Virginia Robbins, director of IT at 
Chela Financial Resources Inc. in San 
Francisco, saw this when a woman on 
the team began taking over some duties 


it official. Otherwise, Ka- | 





Sumter’ S 


Role 


“Sponsorship is not a spectator 
sport,” says Gopal Kapur, president 
of the Center for Project Manage- 
ment. A good IT project sponsor 
commits political capital as well as 
resources and personal time, Kapur 
adds. The sponsor should be able 
to make 80% of all decisions with- 
out approval from higher-ups. Oth- 
er roles and responsibilities in- 
clude the following: 

= Making sure the project 
manager and the team have 
the skills necessary to man- 
age the project 

= Providing guidance for key 
business strategies 


a Understanding the proj- 
ect’s complexity 

w Empowering the project 
manager 

a Championing the project 
and the team 

a Formally managing the 
project's scope 

= Approving plans, schedules 
and budgets 

a Ensuring sustained buy-in 
= Clearing roadblocks 


= Ensuring timely availability 
of resources 

a Reviewing the project’s 
progress 

= Ensuring that project bene- 
fits are realized 


that a subpar sponsor wasn’t doing. 
When a new sponsor arrived, Robbins 
re-formed her team, and the new spon- 
sor re-established the original roles. 
“He had to look her in the eye and state 
that he would take on these duties,” 
she recalls. “Then we had to reaffirm 
the vision for the project. He assessed 
the work, refocused the folks and 
cleared the decks.” Re-forming the 
team “feels like a waste of time,” Tom- 
czyk acknowledges, “but every time 
I’ve tried not to do it, I got burned.” 

GO FOR IT. The loss of a sponsor gives 
the seasoned project manager a chance 
to stretch. “That’s how promotions get 
done,” Kapur says. “Step up to the 
plate, do a Hail Mary and see what 
happens. Otherwise you're losing a 
great opportunity.” @ 43737 
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| The Almanac 


Aneclectic collection of research 


and resources. By Mitch Betts 
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Failing to Learn 
From IT Mistakes 


Examples of corporate IT project 
failures are well known, from AMR 
Corp.’s Confirm reservation system 

to Hershey Foods Corp.’s ERP melt- 
down. The reasons are well known, 
too — from technology and financial 
shortcomings to a lack of end-user and 
management support. All of this is cat- 
aloged in the book Software Develop- 
ment Failures, by Kweku Ewusi-Men- 
sah (MIT Press, 2003). 

What’s new is the author’s examina- 
tion of a subset of IT failures: aban- 
doned projects. These are IT projects 
that were partially or completely aban- 
doned before implementation — often 
in the coding/testing phase. In other 
words, they got pretty far along before 
someone figured out that they needed 
to pull the plug. 

What’s especially distressing is that 
IT organizations continue to make the 
same mistakes on subsequent projects. 
Most of them conduct post-mortem 
reviews to identify what went wrong 
and why, which is good news. But the 
author’s research shows that half of 
them don’t keep records of the lessons 
learned, and even those that do keep 
records don’t make good use of them 
for new projects, so they’re doomed to 
repeat past mistakes. 

This book recommends a “triangula- 


tion strategy” for postabandonment re- | 


views, using questionnaires, structured 
interviews and archived records to fig- 
ure out why a project failed. But the 


most useful question of all may be, 
“What are the most important things 


| you would point out to your manager 


or your staff if you joined a similar 
project in the future?” 


| Why Wait Until 
| The Project Ends? 


| As good and important as retrospec- 
| tive project reviews are, they obviously 


come too late to do any good for an al- 


| ready completed (or abandoned) proj- 
| ect. That’s where 
| tives” come in, says Lynne Nix, a se- 


‘project introspec- 


nior consultant at Cutter Consortium 
in Arlington, Mass. 

“The project introspective allows 
the project team to assess what is and 
is not working and to make midcourse 
corrections,” Nix wrote in a recent bul- 
letin. The goal is to revisit the original 
assumptions about features, resources 
and schedules, which undoubtedly 
have changed now that you have some 
real-world experience. 

At what point do you get introspec- 
tive? Nix says the reviews should be 
done at the conclusion of each devel- 


| opment iteration or when there’s sig- 


nificant change in the project scope. 


Three Tips 

ABOUT: Program management 

offices (PMO) 

FROM: Eric Gioia and Tricia Davis- 
Muffett, executives at Robbins-Gioia 
LLC, a project management consulting 
firm in Alexandria, Va. 

Keep the PMO separate from the 
project development team so it can 
play an “honest broker” role and objec- 
tively point out problems. The PMO 
should report to the CIO. 

Make the PMO a knowledge manage- 
ment function that collects informa- 
tion on what really happened on previ- 


| ous projects and feeds that informa- 


tion into new projects. 

Know how long it really takes to ac- 
complish a task in your organization — 
not in some idealized situation — so 
you can develop realistic schedules. 








Inconsistency 
Rules! 


How well do you think your 
company manages projects? 
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69% 


— We don't manage projects well: 3% 
——— Not very well: 6% 


BASE: 120 corporate project managers 
attending the Project Management Institute 
2003 conference in Baltimore 
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Harrah’s System 
For Early Warnings 


One challenge for IT managers is 
getting an early warning of project 
problems, especially if team members 
aren’t comfortable raising red flags. 
Harrah’s Entertainment Inc. in Las Ve- 
gas addresses that issue in the follow- 
ing ways, says Heath Daughtrey, vice 
president of IT services. 

Managers meet weekly and review a 
two- or three-page dashboard of per- 
formance indicators to see whether a 
project is on target and on budget. 

IT conducts detailed quarterly 
reviews of the top 10 projects. 

IT has a culture that “embraces visi- 
bility” and isn’t punitive about identi- 
fying risk factors. Actually, “identifying 
a risk is the best thing that a project 
manager can do,” Daughtrey says. 

Also, about a year ago, Harrah’s in- 
stalled software from Niku Corp. in 


| Redwood City, Calif., to better manage 


its huge portfolio of IT projects. The 
software provides visibility into how 
projects are performing and helps man- 
agers make sure the right people with 
the right skills are on the projects, 
Daughtrey says. @ 44471 
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yfttware Project Bill of Rights 


Customers 
have the right to: 


® Set objectives for the project 

and have them followed. 

® Know how long the project will 
take and how much it will cost. 

@ Decide which features are in 

and which are out. 

@ Make reasonable changes 

to requirements. 

@ Know the project's status 

clearly and confidently. 

™ Be apprised regularly of risks that 
could affect cost, schedule or quality. 
@ Have ready access to project 
deliverables. 


Project teams 
have the right to: 
@ Know the project objectives and 
clarify priorities. 
@ Know in detail what product they're 
supposed to build and clarify the 
product definition. 
@ Have ready access to the customer, 
manager or other person responsible for 
making decisions about software 
functionality. 
@ Work each phase of the project ina 
technically responsible way, and not be 
forced to start coding too soon. 
@ Approve labor and schedule estimates 
for any work they're asked to perform. 
@ Have the project's status reported 
accurately to customers and upper 
management. 
@ Work in a productive environment 
free from frequent interruptions and 
distractions. 


SOURCE: SOFTWARE PROJECT SURVIVAL GUIDE BY STEVE MCCONNELL 
(MICROSOFT PRESS, 1997): REPRINTED WITH PERMISSION 
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. * . Ces yan 

Save on shipping. Order online? cahoots rae Ree 
Cem UUme S01 
* 14.1° XGA TFT Display (1024x768) 
25) 3)\) 130 )8) 5s )8) 27 
« NEW! 40GB hard drive with IBM Hard Drive 

vo Mace) Cmte ems y Cy 

SASL: msl Osh ONO OL meer Le) 
* Only 1° thin’ + 4.5-Ib travel weight 
 1-yr system/battery limited warranty 
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 ServicePac® Service Upgrade 
3-yr Onsite Repair/9x5/Next Business 
Day Response #30L9195 ‘243 


for machines normally used for business, professional or trade purposes, rather than personal, family or household purposes. Servi od begins with the equipment date of purchase. If the m 

Replaceable Unit (CRU), IBM will express ship the part to you for quick replacement. Onsite 24x7x2-hour service is not available in all locations. For ThinkPad notebooks requiring LCD or other 

perform service at the depot repair center. ‘For PCs without a separate video card, memory supports both system and video. Accessible system memory is up to 64MB less than the amount stated, depending on video r dard shipping 
included when you order online. U.S. only. "Public wireless access limited. Subscription may be required and fees may apply. "Requires download of client software. IBM, ThinkPad and ThinkCentre are trademarks or registered trademarks of 
IBM Corporation in the U.S. and other countries. Microsoft and Windows are trademarks or registered trademarks of Microsoft Corporation. Intel, Intel Inside, the Intel Inside logo, Intel Centrino, the 

Celeron and Intel SpeedStep are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other company, product and service names may be trademarks or service marks of 0 

© 2004 IBM Corp. All rights reserved 





sum enum KNOWLEDGE CENTER PROJECT MANAGEMENT 


PMO Census 


Does your company have an 
infrastructure, such as program 
management offices, to manage 

major projects? 


BASE: 120 corporate project managers 
attending the Project Management Institute 
2003 conference in Baltimore 


Project Problems 


Project managers say these are the top 
five problems facing their organizations: 


Inconsistent approaches to 
managing projects 
Difficulties in allocating 
resources 
Too many projects, or not the 
right projects 
Economic pressures 
(such as ROI metrics) 


Tie: Projects that are late and over 
budget; limited visibility into activities 


BASE: Survey of 74 corporate project 
managers who are subscribers of 
Projects®Work magazine 


Farming It Out 
Percentage of organizations that 
outsource project management: 


Currently 
outsource —e! 


23% 
16% —* 


Considering 
outsourcing 


www.computerworld.com 





MARK HALL 


Thieves 
Among Us 


HOULDERING PROJECT MANAGEMENT responsibilities isn’t for the aver- 
age Joe or the fainthearted. It requires people who have a relentless, or one 
might even say obsessive-compulsive, attention to detail. They must also be 
thick-skinned individuals, willing to withstand verbal barbs, insults to their 
genealogy and possibly some old-fashioned assault and battery from people 
tired of being prompted for their part of the project. 
“Tt’s a tough job with long hours and stress that needs someone who’s a cross be- 
tween a ballet dancer and a drill sergeant,” says Richard Murch, author of Project Man- 
agement Best Practices for IT Professionals (Prentice Hall PTR, 2000). 


I think there’s one more trait to look for in great | 
project managers: They must be a tad bit larcenous. 


That trait comes in handy when using project man- 
agement tools. First-tier project managers know when 
to override or ignore thresholds on deliverables. They 
know how to beg, borrow and steal other resources 
without accounting for them. They know when and 
where to overspend. And they know how to spin the 
details to upper management. In other 
words, they can cheat and get away with it. 

Murch, like many others, would vigor- 
ously disagree with me. He argues that to- 
day, project management tools and exacting 
training programs make project manage- 
ment a serious, proven discipline that will 
reap significant ROI. The field is populated 
by serious, professional practitioners who 
use tools and techniques in a highly rigor- 
ous and logical fashion. 

I don’t disagree. Without a well-con- 
ceived and well-run project management 
system, an organization, especially a large 
one with many ongoing projects, will de- 
volve into chaos. But the best project man- 
agers aren’t single-minded about the tools they use or | 
even the business processes involved. Slaves to project | 
management systems often make excellent workers on | 
a project team, but they tend to be lousy managers. 

I developed this theory in my past life as director of | 
the largest independent PC-testing lab in the U.S. We 
ran lots of projects — some large, some small, some 
straightforward and others mind-bogglingly complex. 
Some projects took a couple of days; others would run 
for months. Every project had its constituents. Some 
you liked to work with. Some you didn’t. 

Each project was assigned people with an array of 
talents. And each had its manager, budget, deadlines 
and copious reports. 

Every project also had its bumps in the road, crises, 
angry encounters, wholesale catastrophes and even 
the occasional lawsuit — not necessarily in that order. 

We used many tools to oversee projects. And we 
created new ones when necessary. We had countless 


(erie 


at large. Cor 
mr icd 
CAEL) 


meetings about process and then codified agreements 
into project management systems. 

Despite all the pain and anguish, projects did get 
done. And I noticed that the highest completion rates 
and deadline achievements were those projects whose 
team leaders understood the value of skullduggery. 

For example, testing new software, operating sys- 
tems or networks usually involved standard-config- 

ured clients and servers. While a techni- 
cian ran a benchmark or an application 
suite for compatibility or performance 
data for one project, a clever project man- 
ager for another effort conned that techni- 
cian to run a different benchmark ona 
nearby test bench. Instantly, that manag- 
er’s project got new resources, and the 
tracking system never knew a thing. 

One might argue that the data on one or 
both of those tests was flawed because re- 

Paes sources were used and not factored in. So 
wera ps you can bet when I heard about the fellow’s 
practice, I called him into my office and 
asked him how he dared do such a thing. 
Then I suggested that he instruct other 
project managers on how to leverage the idle time of 
other testers and continue to bypass the system. 

Another project manager was known to get his team 
together after hours and physically move machines 
from one test area to another to bulk up the test loads 
for server evaluations. In theory, the team would sneak 
the purloined systems back in during the wee hours of 
the morning. But not everything was always properly 
reconnected, and there was grumbling among the less- 
resourceful project leaders. 

Yet once uncovered, the wisdom of the thievery be- 
came obvious. So we built mobile testbeds with pre- 
wired clients and servers that could be easily added 
and removed from any test area. It saved us money 
and improved completion rates. 

So the next time you're interviewing candidates for 
a project manager’s position and you need a really 
great one, you might check their rap sheets — and 
hope you find something. @ 44234 
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MARKETPLACE 


Get Rid of barr Box, 


The PC Box 


An entire PC inside a keyboard 


APPLICATIONS: 
Business, Call Centers, Banking, 
Healthcare, Retail, 
Internet access, Schools... 


Tce eee A Phd 

Internal floppy. 

Tr Bc murele La) 

PMc Rte) 

Parallel Port * TV-Out (NTSC/PAL) 
Plastic Skin Protector ~ 

LCD Displays: 15", 17", 18" 

Frit Mh ami cel it ae elie) ()) 
Wireless 802.11b/g available 


Runs all Microsoft™ Windows 98/2K/XP/NT operating systems. 

U. S. Patent Pending. © 2004, Cybernet Manufacturing, Inc. all rights reserved. 
BU Re ee EPA eee Re CeO aa 

Eric recs Maem CM Rie Mie OE Re ea Co mt ee 
pee Ber ere Re Meee Me mice eel MUR Me emir Ele 
Crimes Me ea mee eRe rece Mee ane Bum ena) 
owners. Prices and specifications are subject to change without notice. All prices 
are excluding tax and shipping. Monitor not included. 


Save Space. 


The Zero-Footprint-PC, Elite-4 is an entire 
PC built inside a normal size keyboard and 
is the only all-in-one PC that gives you 
total display flexibility. You may use any 
VGA monitor or LCD flat screen display. 


STANDARD FEATURES: 

* Intel® Pentium® 4 Processor up to 2.80GHz/533 FSB 

* 128MB DDR333 SDRAM up to 2GB 

* 40GB IDE 7200 RPM hard drive, up to any size 

¢ 10/100 Ethernet, 4 USB 2.0, 2 IEEE1394 Firewire, 2 Serial Ports 
* 2-Year Limited Warranty 

All these features are inside the keyboard! 


as low as for ZPC4020, Intel 


$475* Celeron” 1.70Ghz 
Processor, 128MB 

Ram, 40GB hard 

disk, 10/100 LAN 


Space Saving Technology 


ce 
CYBERNET ™ 


33 
For product specs and model options visit us a: WWW.Cybernetman.com, 
or call: TOLL FREE 888-834-4577 International 949-477-0300 
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here's a short list of high-impact information 
oe priorities for the healthcare industry — 
mobility, information security/privacy and point-of- 
information connectivity. Add to this list the eHealth 
Initiative, a nationwide effort mentioned in President 
Bush's State of the Union address in January, and every 
dollar spent on healthcare IT must have an impact. 


The eHealth Initiative, according to Janet Marchibroda, 
executive director of the Foundation for eHealth Initiative, 
interconnected electronic health 
information infrastructure — patient information available 


would create an 
when and where it's needed to provide vital care and the 
ability for patients to use telemedicine when appropriate. 
The foundation is administering more than $4 million in 
federal grants for pilot community health programs based 
on data and information technologies that link hospitals, 
outpatient facilities, primary care and specialty care 
practices. The Health Information for Quality Improvement 
Act currently moving through Congress reinforces this 
effort, providing a loan program and other support for 
building the nationwide IT infrastructure and standardizing 
forms to facilitate exchange of information and data. 


Marchibroda says that today just 5% of the nation’s 
physicians use electronic health records. “We have seen an 
uptick” over the past 18 months, she reports. “| think that 
within the next five years, we will see almost half of the 
providers with such tools.” The effort is getting a boost 


Advertising Supplement 


from federal funds on pilot projects and learning labs, the 
setting of standards and the use of IT and electronic data to 
improve quality and safety @f patient care. 


With a nationwide focus on healthcare providers 
switching to IT to improve quality and safety, there's some 
evidence that the hiring is famping up. According to Betsy 
Hersher, a member of the Health Information Management 
Systems Society, the group currently has 14,000 members. 
Hersher, who recruits executives in the IT healthcare 
segment, says there are job openings throughout the 
spectrum — from entry level to more than 45 chief 
information/technology officer openings that currently 
exist in the healthcare industry. And, according to Hersher, 
pay for IT healthcare professionals is on par with 
other industries. 


Sheldon |. Dorenfest, CEO of Sheldon |. Dorenfest & 
Associates in Chicago, says healthcare IT spending rose by 
9.3% in 2003 to $23.6 billion. Dorenfest forecasts a 9% 
increase in IT spending for healthcare for at least the next 
three years, growing to $30.5 billion by the end of 2006. He 
has projected the most significant. spending in Picture 
Archive Computer Systems (which digitize MRI, CAT and X- 
ray images) and Computerized Physician Order Entry 
Systems using mobile devices. “While healthcare IT system 
purchases outpace prior expectations," Dorenfest says, 
“there continues to be a growing work process problem 
within healthcare organizations. With this additional 
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clinical systems buying, there is a possibility that 
work processes will deteriorate unless implementation 
approaches are improved. Significant emphasis must be 
placed on simplifying and improving work flow during the 
implementation of these new systems. " 


Among those leading the change within the industry is 
Linda L. Reino, chief technology officer for Universal Health 
Services Inc. “There's a lot of excitement about IT in 
healthcare for the future,” she says. “Wireless is exploding, 
we have to address mobility of healthcare providers, and 
the use of browser-based technologies to make the systems 
more intuitive to reduce training. The faster and more 
efficient we can streamline patient condition information 
and disseminate it to be used by many — those are the 
most important things that the next generation of projects 
will involve.” Reino says the turnover rate among clinical 
staff and the mobility issues are unique to healthcare, 
making these types of developments leading edge for 
IT professionals. 


For more information about IT Careers advertising, 
please contact: Nancy Percival 

Vice President, Recruitment Advertising 
800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 


SW Dev Engineer - Assist in Sr. Database Administrator 


Gets job advice from the newspaper. 


Goes to Dice.com first for complete tech career guidance. 


Only tech jobs « Career guidance 
Salary info + Daily job notification 
Training & certification 


DU} 8919 1007 @ 


Required: 


Xtreme Worldwide Solutions, 
Inc, New Hampshire 


We are looking for professionals 
(software engineers/program- 
mer Analysts/Web Developers/ 
QA Testers) with experience in 
following areas or combination 
thereof: 


ERP People Soft /People Soft 
Technical, Financials/People 
Soft HRMS, Oracle Manufactur- 
ing /FIN/HR applications. Also 
EDI, GEMMS & System ESS, 
SAP R/3, VBA, ABAP. 


OS: Unix, Sun OS, Solaris, HP- 
Unix, MS DOS, Windows NT/ 
2000/98/95/4.0/3.1 


RDBMS & Applications: Ora- 
cle 7.x/8, Crystal Reports, MS 
Office, Lotus Notes, MS Access. 
COM/DCOM/OLE, OOM, SQL- 
Server 6.5, Sybase 11.0, DB2, 
Oracle DBA 


Languages/Packages: VC++, 
C, C++, MFC, Java, Power 
Builder, Visual Basic, Oracie De- 
veloper 2000, Sybase/Oracle, 
80x86 Assembly, Cobra, CGI 
JDBC, IIS, ASP, inter Dev, MS 
Visual Source Safe 4.0, SQA, 
ADO, COM, Active X, OLE, 
ODBC, Shell, Perl, HTML/CGI, 
PL/SQL, Pro*C, Lotus Script, 
FoxPro, TCP/IP, Lotus, Java 
Script, COBOL 


Tools: MS _ Excel, Pro*C, 
SQL*Loader, Import& Export, 
OLE, OCX, Active X, ODBC, 
Visual Source Safe 


Testing Tools: Win Runner, 
Load Runner, Silk, SQA Robot. 


Require MS/BS in computers/ 
engineering or related, with one 
or two years experience in relat- 
ed field 


Must be willing to travel to differ- 
ent sites. We offer competitive 
salaries and benefits 


Mail resumes to: HRD, Xtreme 
Worldwide Solutions, Inc., 75 
Gilcreast Road, Suite 200, 
Londonderry, NH 03053 or Fax 
to: 603-386-6185. 


designing, developing, coding, 
testing & debugging new SW or 
making enhancements to exist- 
ing SW using Object-Oriented 
analysis & design, Unix Shell 
Scripting, SQL, DB, C++, CGI, 
Perl, Oracle, HTML, & 
Javascript. Develop solutions 
across mult disciplines & be 
responsible for explaining solu- 


mentation processes & test pro- 
cedures to complete moderately 
complex SW projects. This is an 
entry-level position working 
under close supervision of the 
SW Dev Mgr. BS Comp Sci, 
Eng, or related field + one year 
of related experience (SW 
Engin, Comp Engin, and/or 
Comp Prog) & working/theoreti- 
cal knowledge of: Object- 
Oriented analysis and design, 
Unix Shell Scripting, SQL, DB 
C++, CGI, Peri, Oracle, HTML, 
& Javascript. $63,300/yr. M-F. 
8-5. Littleton, CO. Must have 
proof of legal authority to work 
permanently in U.S. Application 
by resume only to Workforce 
Development Programs, °0O 
Box 46547, Denver, CO 80202 
Ref job#CO5067662 


Senior Programmer/Systems. 
Works w/ business unit clients to 
interpret business strategies & 
objectives to support implemen- 
tation of Siebel (Orion) new info: 
systems application. Applies 
knowledge of Siebel 2000 & 
Siebel 7, JavaScript, SQL (PL- 
SQL a plus), etc. Req Bach- in 
Comp. Sci. or Any Engineering 
Field and 2 yrs exp. in job or 2 
yrs exp. as a Systems Analyst. 
Send ad & resume: Kyle Foster, 
Amgen Inc., One Amgen Center| 
Dr., Thousand Oaks, CA 91320- 
1799 (jobsite). Include Ad# 03- 
575FV. 
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(Omaha, NE) - Design, install, 
maintain & upgrade production 
DBs & provide tech. guidance & 
oversight of DB admin. initia- 
tives, incl. overall performance 
of DB environment. Work close- 
ly wiclients, bus. analysts, sys. 
programmers & application dvi- 
prs to define & resolve info. flow 
& content issues to transform 
bus. req’s into environment spe- 
cific DBs. Monitor & analyze 
performance metrics & allocate 
DB resources to achieve opti- 
mum DB performance. Maintain 
multiple servers & DBs of medi- 
um to high complexity w/concur- 
fent users, ensuring control, 
integrity & accessibility of data 
Work w/Oracle DB Administra- 
tion 8.x, 9.x on Unix & NT plat- 
forms, Oracle Applications 11i 
Sys. Admin. & Unix (Shell) pro- 
gramming. Req's: Bachelor's 
degree in Comp Sci, Math, Eng 
or related & 2 yrs exp in job 
offered or as Oracle DB Admin- 
istrator &/or Consultant, incl. 
working w/ Oracle D! B Admin. 
8.x, 9.x on Unix & NT, Oracle 
Applications 111 Sys. Admin. & 
Unix (Shell) programming. M-F, 
Qam-5pm, 40hrs/wk, $85K/yr. 
Send resume to: Nebraska Wor- 
kforce Dvipmt, Attn: Madhavi 
Bhadbhade, PO Box 94600, 
Lincoin, NE 68509. Refer to Job) 
Order #TRELS-VGU7D-82053 


CustomerOne (Everbank) looks 
for Business Analyst to perform 
analysis, modeling to maximize 
profits, develop statistically- 
based credit/loss forecasting 
models for loan products includ- 
ing overdraft lines, HELOCs 
BS/BA with 1-yr exp using 
SAS/SQL. Contact: 
Jane.Dulle@EverBank.com 


Synova has multiple openings 
for Project/Software Engineers, 
System/Programmer Analysts. 
Our clients include Fortune 500 
Candidates must have MS or BS 
with experience. We offer attrac- 
tive wage with full benefits. 
Travel maybe required. Email 
resume to ads@synovainc.com 
EOE 
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Itcareers.com 


can solve the 


labyrinth of 


job hunting by 


matching the 


right IT skills 


with the rig 


IT position. 


Find out more 


www.itcareers.com 
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Audio Signal Processing 
Expert. MS in Electronics or 
Music Eng. Min 1 1/2yrs wk 
exp in musical signals and 
psychoacoustic models 
R&D dept reqs eng with 
strong math & physics 
background; exp in audio 
signal analysis/synthesis 
percep. models of sound & 
low br coding. Full posting 
www.chaoticom.com 
Submit resume: jobs@ 
chaoticom.com, Ref. Req# 
569 - Two openings 


Database Administrator w/exp 
to install & upgrade Oracle da- 
tabases, ( Apps (ERP 
and ADI on Sun Solaris & MS 
SQL. Oracle Hot & Oo 
backup using Veritas netback 
up. Ma in Disaster 
ery servers. Clone 
jJatabase & af 
test & development environ- 
ment. Apply ERP & database 
patches. Performance tuning 
for databases and applica 
s. Mail Resumes to: Vedior 
North America, 60 Harvard 
Mill Square, Wakefield, MA 


Administrator wit 
2 in high-speed net- 


nternet 


Riedese!l, 7820 Perry 
rie, PA 16509. Must 


code #078. EOE 


SOFTWARE ENGINEER 
sought by well-monitoring 
software development co 
in Houston, TX. Requires 
M.S. in Comp. Sc. plus exp 
(employer will consider 
applicant's completing ail 
coursework except for the- 
sis as also meeting the edu- 
cational 
Respond by resume oniy to 
Lynn Brown 

vMonitor, Inc 

Katy Road 

Houston, TX 77( 


requirements) 


based appli 
arch 


grates the 


ange Office, 19 St 
Fl., Boston, MA 02 


Where The 


Best 


Get Better! 


www.itcareers.com 
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It is at the heart of our work, not only the energy we provide to the entire 
world, but also the energy which drives our people. The following represents 


our needs with Saudi Aramco in Dhahran, Saudi Arabia 


EDP Systems Analysts 
SAP Training Specialists 
EDP Applications/Systems. Specialists 


Seeking candidates with experience in the latest versions of Oracle, Unix 
(AIX and SUN), Data Management/Storage technologies, Web Development 
tools, and emerging SAP related technologies 


For consideration, please send a resume to Aramco Services Satelaal er la) A 
reference code 06J-ITCAREERS, in one of the following ways: Fax: 
(713) 432-4600; Mail P.O. Box 4530, Houston, TX 77210-4530; e-mail 
fol Ly east a- late B ol ta Me baie laced 
resumes@aramcoservices.com. 


For a detailed description of the above 
positions, please refer to our website 


www.jobsataramco.com. 


Sr Systems Analysts to man 

age teams to analyze ign 
appis using VB. 

S. MS Access etc using 

lorm database 

ERWIN, create 


CORBA, XML, O 


installing system 


quire a B.S. or f 


F/T. Travel invoived. Resu tc 
HR, Unilir 5, Alexa 

der Dr., Ste 110, Alpharetta, GA 
30022 


Programmer/Analyst wanted b 
Consulting firm in IL to dsgn & 
dvip advanced d/bases & 
applics, inci. systems analysis & 
integrating Client Server applics. 
architect isgn & mpimt 
Databased applic Relational 
Database & Client/Server 
Envrmt & Dvipmt in Distributed 
Database mgmt system using 
CASE tools. Must have Bach or 
equiv in Engg & 1 yr exp in job 
offd Please respond to 
Mohammad N. Yaqoob, Mgr, M 
Y Management, inc, 8060 N 
Lawndale Ave, Skokie, IL 60072 


pyre Pera 


Saudi Aramco 


Programmer Analyst need- 
ed to plan, develop, test 
and document computer 
programs and systems spe- 
Ccializing in posta! solutions. 
M.Sc. in Physics, Math, EE 
CiS or equivalent reqd 
Contact Sung Park @ 877- 


774-3600 
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SR. VISUAL BASIC 
CONSULTANT 


Systems Analyst w/B.S 
& 2 years experience 
Houston TX Ser 
resume to: HR Dept 
BlossomSelect, 1302 
Waugh Dr. Ste 863 


Houston, TX 77019 
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SW Dev - Assist in the 


Jesign ment trou- 


Software Engineer to design Full time Project Manager 
elop id implement com- 
application software 

using C, C++, Assembly, Visual 
DSP++, Vantive, Clearcase, UN tiered 
IX Shell Scripts and RTOS, as Server based multi-user, Re- 
well as communication/network engineering/Conversion applica 
‘ols jiuding ATM/Frame tions projects throughout the 

ay/IP under Windows and United States: 
UNIX operating systems. Re 
quire: Master's degree in Com 
puter Science, an Engineering 
discipline, or a closely related 


design 
1 various 
5. using J2EE technologies. 
OOAD, Rational Rose, Java 
XML, JavaScript, VBScript 
HTML etc; perform requirements 
analysis, problem analysis, solu: 
tion design, implementation and 
nage systems documentation on d sped 
business analysts and Z is.; provide training and user 
pport staff; audit applications support for the systems and 
related appls.; perform debug- 
in id modifications on exist- 
field wit yrs of exp in the job 7 oir abt : ~ iS os 
offered. Attn: Job SP. 2 ae ene SorclaN CoN nce Math/Engin. 
Senior Software Engineer to aor tions: iser € any branch) or related 
develor te rt as 7 field High salary, full time posi- 
=nhance > RM anc "4 Be . i tior 4, fF 
sed application soft 2 wh, Pee . tesurr HR, Opal Soft, inc 
using SAP R/3, ABAP 4, Jav in t applice rave Expwy Ste 205 
JSP, Siebel and HTML on V 2S 4 
dows NT platform; Responsible 
for data mapping ” 
1 integration te 


production supp 


Want a new 
IT career? 


(Multiple Openings). Respon- 


bleshooting, analysis, & delivery sibilities include: ma multi 


ware & systems solutions 


- Internet/Intranet/Client 
SQL 


Check out our jobs 


in the combined 
adheren to 


agement Systems 


CareerJournal.com 


ome travel involved 


database. 


www.itcareers.com 
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reports; Provide 
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IT Careers 
Wants You! 


| Take the hassle out of 


job searching and 


are Engineer 
test electrical & 
ctro optical sys 
9, Analog check us out at 

J & Manu- 

sires: MSEE or 
yr Experience 


www.itcareers.com. 


ce VAP 
Java Beans 


b Apache 


Today, more than ever, 


ruments 


2ct_ management skilis 


the right skills fuel the | 


Sofware EngneerIDSP new economy and IT 
sought by DSP Software. 
Hardware Company loc- 
ated in Irvine, CA. Bach 


Careers wants you to be 
degree or/equiv in 

Software Eng or 
Electronic Eng. + 6 mos . = ‘ 
DSP exp. Send resume ther c. Check us out at: 
to: H.R. Dept (REF: SC) 
3DSP Corporation, 16271 
Laguna Canyon’ Rd 


#200, Irvine, CA 92618 


www.itcareers.com 





Contact the companies listed below 


i Age 
fo help you with your ae To place your ad please call 800-762-2977 


IPexpert, Inc. 

(866) 225-8064 

www. ipexpert.com 

CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, IP Telephony 


Computerworld + InfoWorld » Network World + February 16, 2004 


CBT Nuggets 

(888) 507-6283 & (541) 284-5522 
www.cbtnuggets.com 

Affordable training videos on CD 
MCSE, MCDBA, MCSD, CCNA, 
Citrix, Linux, A+, Net + 
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The World Of 
Work Is Changing 
Every Week. 


eS 


PROGRAMMER/ANALYST 


LUCKILY, WE ARE TOO! 
itcareers.com is now 


powered by 
CareerJournal.com! 


Search for jobs and post 
your resume here on 
www.itcareers.com 


or call:(800) 762-2977 


Computerworld + February 16, 2004 
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How to Contact 


COMPUTERWORLD 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
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Continued from page 1 | 
| 
H-1B Freeze 


last month said that 43,500 | 
H-1B applications, either ap- | 
proved or pending, had al- | 
ready been counted against 
the cap. The number of visas 
generally available for the cur- 
rent fiscal year was further re- 
duced by a free-trade agree- 
ment that specifically allocat- 
ed 6,800 visas for use by work- | 
ers from Singapore and Chile. 
The H-1B visa cap wasn’t 
reached in any of the past three 
years, when approved applica- | 
tions fell well short of the an- | 
nual 195,000 visa limit. But the | 
lower cap could force compa- | 
nies to alter their hiring plans. | 
Cisco Systems Inc. has hired 
H-1B workers in the past but 


It may result 

in some em- 
ployers looking at 
résumés that they 
may have disregard- | 


ed the first time. | 


VIC GOEL, IMMIGRATION ATTORNEY 
IN GREENBELT, MD 


Continued from page 1 


“we're not hiring right now,” 
said John Earnhardt, a Cisco 
spokesman. He noted that as 
for as many Silicon Valley em- 
ployers are concerned, “there 
is a lot of untapped talent in 
the U.S. right now” because of 
IT workforce reductions. 

“For an employer that wants 
to hire a foreign national for a 
given project, they won't be 


| able to do it until October,” 
| said Vic Goel, an immigration 


attorney in Greenbelt, Md. 
Goel said the reduced cap 
may prompt some companies 

to send more work offshore, 
and it could hinder their abili- 
ty to hire academically superi- 
or foreign students graduating 
from U.S. universities.But the 
reduced cap may also improve 
job prospects for U.S. citizens, 
he said. “If you are in a situa- 
tion where you are an out-of- 
work American, it may result 
in some employers looking at 
résumés that they may have 


| disregarded the first time” be- 


cause those applicants didn’t 
have the exact skill sets being 
sought, Goel said. 

Harris Miller, president of 
the Information Technology 
Association of America in Ar- 
lington, Va., said lobbyists are 


| continuing discussions with 


relying more on 


COMPUTERWORLD February 16, 2004 ; 


Bill Would Force Disclosure of Offshore Plans 


WASHINGTON 
Companies that plan to move IT 
jobs overseas may be required to 
disclose layoff plans three months 
in advance, under a bill introduced 
last week by Senate Minority 
Leader Tom Daschle (D-S.D.). 

Daschle said he was respond- 
ing to a Bush administration ar- 
gument put forth by Gregory 
Mankiw, chairman of the White 
House Council of Economic Ad- 
visors, defending a free-trade 
approach to the offshoring of 
service jobs, including IT jobs. 

In testimony last week before 
the Senate's Joint Economic 


members of Congress about 
raising the cap this year. But he 
said it’s too early to tell wheth- 
er those efforts will succeed. 

Miller said he sees a rising 
protectionist attitude that may 
make it difficult. “Right now, 
the mentality among a number 
of members of Congress is 
what I would call ‘fortress 
America,’ ” he said. 

Unemployment among 
computer engineers in the last 
quarter of 2003 was 9%, said 
Ron Hira, chairman of the 


the same software, 


Committee, Mankiw argued that 
offshore outsourcing lowers busi- 
ness costs and allows a company 
“to devote its resources to more 
productive purposes.” 

Citing a loss of 2.9 million pri- 
vate-sector jobs since January 
2001, Daschle said “there is 
nothing good about offshoring.” 

High-tech union leaders 
praised the legislation, maintain- 
ing that public disclosure of off- 
shoring may discourage the 
practice. Moreover, once state 
and local governments become 
aware of an employer's offshore 
plans, “there can be a lot of 


IEEE-USA Career and Work- 
force Policy Committee. He 
said there’s no way of knowing 
with certainty what impact the 
reduced H-IB visa cap will 
have on U.S. high-tech work- 
ers seeking jobs. 

But Hira, an assistant pro- 
fessor of public policy at the 
Rochester Institute of Tech- 
nology in New York, said the 
H-1B program is imperfect. He 
noted that his committee’s 
analysis of data on employers’ 
use of the visa program shows 


lem “exists across the board.” 


pressure points applied to com- 
panies moving work overseas,” 
such as revoking tax breaks, 
said Marcus Courtney, president 
of the Seattle-based Washington 
Alliance of Technology Workers 

But there's little that legisla- 
tion can do to deter companies 
motivated by “solid business 
reasons” from offshoring IT 
work, said Stan Lepeak, an ana- 
lyst at Meta Group Inc. Compa- 
nies can avoid a disclosure rule 
by outsourcing jobs to U.S. ven- 
dors and letting the vendors shift 
the jobs overseas, said Lepeak 

- Patrick Thibodeau 


that some companies are pay- 
ing H-1B visa holders wages 
that are below what U.S. work- 
ers would receive 

The H-1B visa “is supposed 
to work as a last resort rather 
than a first choice,” he said. 
“And I'm not sure it’s working 


that way anymore.” @ 44777 
MORE H-1B COVERAGE 
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defer fees on unused licenses, 


then that is not a He added that Clarks is “a he noted. 


Ofy Peniotyto 

renegotiate x : : ahs 

theirapplication good dea! smaller shop with several large Shepherd added that nearly 
maintenance Richard Scheer- | packages,” which limits its abil- | one quarter of those surveyed 


contracts. 


internal staffers to 
support it —a 
move that’s being 


Business Apps | 


that they’re weighing the idea 
of switching vendors. 

Quaker Chemical Corp. in 
Conshohocken, Pa., is among 
the dissatisfied users. “For the 
last three years, we’ve seen 
[maintenance and upgrade] 
price increases and have re- 
ceived no added 
benefits for this 
added cost,” said 
CIO Irving Tyler. 

Quaker uses ap- 
plications devel- 
oped by J.D. Edwards & Co., 
which was bought last year by 


are consider- 
ing switching 


to more accom- 
modating soft- 
ware vendors. 


aided by the soft 
economy, which 
has made it easier to hire high- 
quality IT workers. Quaker of- 
ficials are also considering a 
plan to hold off on installing 
future software releases unless 
business needs “change dra- 
matically,” he said. 
Tyler declined 
to point a finger at 
PeopleSoft or any 
other vendor, nor 
would he disclose 
specific details about the soft- 
ware costs the chemical maker 


er, vice president 
of IT at The 
Clarks Companies, North 
America, in Newton Upper 
Falls, Mass., said some soft- 
ware vendors have tried to 
force the shoemaker into ex- 
pensive upgrades without con- 
sidering either the costs or po- 
tential benefits of the projects 
Clarks uses ap- 
plications like i2 
Technologies Inc.’s 
supply chain man- 
agement software. 
But Scheerer also 


| ?: plan to stop 
paying 

maintenance 

fees altogether. 


ity to handle maintenance and 
support internally. 
Application vendors have 
been increasing maintenance 
costs and pushing existing 
users to do more upgrades to 
compensate for drop-offs in 
new software sales during the 
past few years, Shepherd said. 
Some survey respondents said 
they have seen 
their annual soft- 
ware maintenance 
costs increase by 
as much as 15% to 


25% over the past 


said they were dissatisfied 
with upgrades they 1 
because the new features did 
n’t justify the costs. In addi- 
tion, 22% indicated that they 
don’t plan to do any uf 
in the next six months, < 
ber that Shepherd said sh 
be “chilling” for vendors look 
ing to boost their revenue 

IT managers should pur- 
chase end-user licenses in 
small increments to avoid 
buying more than they need in 
the short term, Shepherd rec- 


ommended. Users also should 


BASE: 202 companies using 
packaged business applications 
ina variety of industries 


five years and negotiate harder on mainte- 
have been unable 


to get vendors to 


is being asked to bear. But, he 
said, “if the vendor wants more 
fees for the same service and 


declined to single 
out any vendors, 
saying the prob- 


PeopleSoft Inc. Tyler said 
Quaker plans to cut costs by 
stabilizing its ERP system and 


nance terms than on license 


costs, he said. @ 44755 
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AI&T Trips Up SCO 


ODAY’S THE DAY. On Nov. 18, 2003, The SCO Group an- 

nounced that it would sue some corporate Linux user 

within 90 days. That put the deadline at Monday, Feb. 

16. Has SCO sued? I don’t know — I’m writing this a few 

days before that deadline, and my time machine is in the 
shop, so you'll have to go to Computerworld.com for the latest news. 

But regardless of whether SCO has already sued a user or is just 

running a little behind schedule, winning any Linux lawsuits may 
have just gotten a lot harder for SCO. 


Who said so? AT&T — in 1985. 


Here’s what happened: On Friday, Feb. 6, at a 
court hearing in SCO’s lawsuit against IBM, 
SCO laid out its clearest explanation yet of why 
it believes it owns source code that’s in Linux. 

SCO argued that it doesn’t own just the Unix 
source code originally written by AT&T. SCO 
said it also owns all additions to Unix that were 
ever made by companies that licensed Unix 
source code — including IBM, Hewlett- 


Packard, Sun Microsystems and even Microsoft. 


Those additions are “derivative works” of 
Unix. And the Unix licenses that AT&T issued 
said derivative works are to be treated “as part 
of the original software product.” 

So since IBM developed a file system and 


added code for it to AIX, IBM’s version of Unix, 


SCO argued that the code now belongs to SCO. 
And since IBM later donated that IBM-devel- 
oped file-system code to Linux, it’s in Linux 
without SCO’s permission. 

As a result of such donations, there are mil- 
lions of lines of vendor-contributed, SCO- 
owned code in Linux. At least that’s SCO’s 
interpretation of the Unix license. 

Not surprisingly, IBM disagrees. So does 
Novell, which bought the Unix 
source code from AT&T and sold 
the Unix business to SCO in 1995. 

IBM believes that it still owns any 
code it added to the AT&T Unix 
code for AIX. So IBM can remove 
and reuse that code in its own prod- 
ucts, or even give it away to Linux. 

That’s how “derivative works” func- 
tion under copyright law, though 
the Unix license is a contract. 


But on the same day SCO’s lawyer was ex- 
plaining his legal theory in court, Novell was 
faxing something to SCO’s offices. 

It was a copy of “$ echo,” a newsletter pub- 
lished by AT&T in 1985 for its Unix licensees. 
In it, AT&T clarified what that derivative-works 
clause in the Unix license meant. (Apparently, 
there was confusion about it even then.) 

AT&T said it wanted “to assure licensees that 
AT&T will claim no ownership in the software 
that they developed — only the portion of the 
software developed by AT&T.” 

In other words, AT&T never intended for 
Unix licensees to give up ownership of code 
they added to their versions of Unix. That was 
never part of the deal. And the deal AT&T cut 
is the one SCO has to live with — even 19 years 
later. That’s how contracts work. 

Of the million lines of Linux code that SCO 
claims IBM hijacked from Unix, SCO hasn't 
identified a single line that came from the origi- 
nal Unix source code. It was all created by IBM. 


IBM’s to keep — or give away. And SCO’s theo- 
ry that it owns Linux code appears to be kaput. 
Of course, AT&T’s blast from the 
past won't bring the gavel down on 
SCO’s suits tomorrow. IBM, Red 
Hat and Novell are already in court 
with SCO. If a corporate Linux user 
joins them, even with good lawyers 
and help paying for them, any suit 
is likely to be painful and long. 
But it helps a lot to have the 
company that wrote those Unix li- 
censes on their side. Even if it’s 


Just Don’t Do It 


This small engineering company gets hit with the My- 
doom virus, which arrives with a phony “From” line. 
“Most of the users, especially clerical and technical, 
are pretty savvy and don't open suspicious e-mails,” 
says sysadmin pilot fish. But one engineer feels a 
need to explain how his PC was infected: “I got an 
e-mail from myself, so | opened it.” But you must have 
known you didn’t send yourself an e-mail, fish points 


out. Why open it? Engineer: 


from me it had to be OK.” 


“| figured since it was 


into the vents 
in the top of 
the machine. 
After his termi- 
nation, the 


: problem never recurs.” 


' Don’t Call 


manent kind, the in- 
staller tells the admin in 
charge of the meeting 
room. So she puts up a 
sign: “Do not write on 
this board.” “Three 
years later, the new 
whiteboard has never 
been used,” groans IT 
pilot fish. “And people 
are questioning why it 
was bought if you’re not 
allowed to write on it.” 


Don’t Flip 

This mainframe keeps 
crashing with shorted- 
out circuit boards, and 
the vendor and IT man- 
agement are accusing 
each other of being re- 
sponsible for the prob- 
lem. But it always hap- 
pens on second shift, so 
after discussing it with 
the second-shift opera- 
tor, management sets up : 
avideo cameratolook =: 
for clues. “On videotape, : 


; Why is the IT depart- 

:? ment’s main phone set 

: to “Do Not Disturb”? 

: user asks pilot fish. Fish 
: isn’t sure, but when he 

: calls about a different 

: matter and gets through, 
: he asks in passing why 

: the phone’s display 

: showed DND at first. 

: Sighs fish, “Apparently it 
: was because a lot of 

: people were calling.” 


: Don’t Ask 

? It’s 1980, and this data- 
: processing service bu- 
: reau runs the accounting 
: work for a local depart- 
: ment store. “On occa- 
: sion, the client would 

: ask for slightly different 
: versions of the monthly 
: reports, which always 
: required programming 
; changes,” says a pilot 


fish at the service bu- 


the operator is seen flip- i i 


ping something into the 
CPU,” says a pilot fish 

on the scene. “Confront- 
ed with the tape, the op- 
erator admits that when : 
he wants free time on 
his shift, he flips a penny : 


: client that her latest re- 
: quest would incur a pro- 
? response: ‘instead of 


changing the program, 


: couldn't you just tell the 


computer what to do?’ ” 


FEED THE SHARK! Send your true tales of IT life to 


www.computerworld.com 


sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


Who’s right? Looks like a nasty AT&T in 1985. Because 1985 just 
may mark the end of SCO’s law- 
suits — and the beginning of Lin- 


ux’s future. @ 44733 


he said/she said court fight over 





what that derivative-works clause 
means, doesn’t it? 





Introducing Firebox’ X. It’s all the integrated, expandable network 
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Grid: Faster and Cheaper 


IBM Oracle 
On Demand Grid 


32-Processor Server 16 4-Processor Computers 


Only Pay for the Plug Computers Into 
Processors You Use the Grid as You Need Them 


$46,875 Per Processor $8,250 Per Processor 


763,898 1,184,893 
Transactions Per Minute Transactions Per Minute 





And the grid never breaks 


ORACLE 


oracle.com/grid 
or call 1.800.633.0753 


Comparison is based on a single IBM pSeries 690 Server versus a grid of small servers. As of December 17, 2003: Oracle Database 10g: Sixteen 
node HP Integrity rx5670 server cluster, each with 4 Intel® Itanium’ 2 1.5 GHz processors, 1,184,893.38 tpmC, $5.52/tpmC, available April 30, 2004 
IBM DB2 UDB 8.1: IBM eServer pSeries 690, POWER4 1.7 GHz, 763,898.39 tpmC, $8.25/tpmC, available November 8, 2003. Source: Transaction 
Processing Council (TPC), www.tpc.org. Per processor prices are based on the TPC-C executive summary for the respective results listed above. 
Note: ‘Never breaks’ indicates that when a server goes down, your system keeps on running. 


Corporation. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates 
Other names may be trademarks of their respective owners 





